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ISO TO SOL'S BIG THREE: 
GET TOGETHER ON XML 



'SOL 2003' to standardize XML 
interfaces, improve interoperability 



BY EDWARD J. CORREIA 

It's been nearly four years since 
the last update to ISO/IEC 
9075, better known as SQL 99. 
In that time, the wide 
adoption of XML as 
an integration method 
has caused the major 
database vendors — in 
the absence of a stan- 
dard — to go their sep- 
arate ways on interfac- 
ing with XML. 

That's about to 
change. When the 
next version of the 
SQL standard, code- 
named "SQL 2003," 




'Yukon' will 
ment parts 
2003, says 
Microsoft's 



is published later this year or 
early next, it will extend the 
SQL syntax and specify how 
the multidimensional language 
should interface with 
the document-centric 
2D world of XML. 

Ake Persson, a 
developer with Swe- 
den's Upright Data- 
base Technology AB, 
and a spokesman 
for the International 
Standards Organiza- 
tion (ISO), the body 
responsible for pub- 
lishing the database 
► continued on page 18 
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ActiveState 
Vows It Will 
Stay Active 

Says despite Sophos acquisition, 
Komodo, language tools will survive 



BY DAVID RUBINSTEIN 

Anti-virus company Sophos 
Inc. late last month acquired 
the assets of ActiveState Corp., 
which develops both e-mail fil- 
tering software and integrated 
development environments for 
open-source languages such as 
PHP, Perl and Python. The all- 
cash deal was valued at US$23 
million. 

Sophos founder and joint 
CEO Peter Lammer said in a 
statement that ActiveState's 
anti-spam technology will round 
out Sophos' offering. He did not 
make any mention of the Komo- 
do IDE or the tools for the 
open-source languages that the 
privately held ActiveState creat- 
ed. The focus of the acquisition 
clearly was on PureMessage, the 
company's anti-spam and anti- 
virus e-mail filter. 

But David Ascher, the tech- 
nical lead for ActiveState's 



Komodo IDE and Python ini- 
tiatives, claimed support for 
the tools and programming lan- 
guages will "grow and expand 
as scheduled." Komodo 2.5 
shipped a few days before the 
deal was consummated, Ascher 
said, and the company is con- 
tinuing to discuss its future. 
"We will stay involved with the 
programming language com- 
munities," he said. "There's no 
reason to mess with something 
that works so well." 

Mark Jacobsen, executive 
vice president of business 
development at O'Reilly & 
Associates Inc., which is a vocal 
advocate for open-source lan- 
guage and also an investor in 
ActiveState, said that through- 
out the negotiations, Sophos 
officials indicated they were 
committed to continuing the 
open-source tools line. "They 
► continued on page 10 



AMD Brings 64-Bit to Mass Market 

Beats Intel's Itanium to desktops, notebooks 



BY ALAN ZEICHICK 

SAN FRANCISCO — The 
desktop just got more compli- 
cated — and potentially more 
powerful. In late September, 
Advanced Micro Devices Inc. 
released its Athlon 64 processor 
family, the company's first 64-bit 
chips to target desktop and lap- 
top computers. 

These new chips, based on 
the AMD 64 microarchitecture, 
are similar to the company's 
Opteron processors in that they 
can run not only 32-bit x86 
applications at full speed, but 
also 64-bit applications using a 



set of extensions to the x86 
instruction set. In fact, when 
running a 64-bit operating sys- 
tem, the processors can support 
both 64-bit and 32-bit applica- 
tions simultaneously. 

There are three members of 
the Athlon 64 family, all of which 
use model numbers rather than 
clock speeds. AMD argues 



that architectural differences 
between its chips and Intel's 
offerings make clock-speed 
comparisons inaccurate for 
gauging processor perfor- 
mance. 

The Athlon 64 model 3000+ 

is designed for notebook PCs; 

the model 3200+ is for consumer 

► continued on page 17 





AMD CEO Hector de J. Ruiz, center, launches the Athlon 64 with guitarists 
Dweezil Zappa and Ray Benson. 



RENEWED CALL 
FOR OPEN 
BENCHMARKS 

Court decision gives 
advocates a boost 

BY DAVID RUBINSTEIN 

The decision last month in U.S. 
District Court to deny a request 
by TIBCO Software Inc. to 
squash the publication of com- 
petitive benchmark results by 
Sonic Software Corp. has again 
cast a light on the issue, with 
advocates of the open exchange 
of information hailing the rul- 
ing as a victory for customers. 

TIBCO, which did not 
respond to several requests to 
discuss the case, had sought a 
restraining order to stop Sonic 
from publishing a performance 
comparison between the Son- 
icMQ and TIBCO Enterprise 
for JMS products. The court's 
decision read in part, "The 
► continued on page 18 
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SCO, Linux Vendors Trade Shots 



HP indemnifies customers; IBM files new countercharges 



BY YVONNE L. LEE 

In the latest round of shots 
between The SCO Group and 
Linux vendors, SCO is filing a 
motion to have a suit against 
it dismissed, Hewlett-Packard 
Co. is indemnifying its cus- 
tomers against potential copy- 
right lawsuits that may be 
pressed against them, and IBM 
Corp. is serving a new round of 
countercharges against SCO. 

The specific new counter- 
claims by IBM include breach 
of contract, trademark viola- 
tion, unfair competition, in- 
tentional interference with 
prospective economic rela- 
tions, unfair and deceptive 
trade practices, breach of the 
GNU General Public License 



(GPL), promissory estoppel, 
infringement of seven specific 
IBM copyrights and patent 
infringement. IBM has asked 
for compensatory and punitive 
damages, as well as declarato- 
ry relief. It also has requested 
that it be awarded costs and 
reasonable fees. 

The latest legal dance moves 
follow a chain that began in 
March when SCO sued IBM, 
alleging the Armonk giant had 
violated SCO's trade secrets 
when it contributed to Linux. 
SCO also sent letters to more 
than 1,500 large corporations 
warning them that they could 
be in violation of SCO's copy- 
rights by using Linux. Ensuing 
volleys included Linux distribu- 



tor Red Hat Inc.'s filing a unfair 
competition suit against SCO 
in U.S. District Court for the 
District of Delaware, IBM's 
filing a countersuit, and SCO's 
issuing a licensing program 
under which Linux owners 
would pay the Utah company 
per copy of Linux. 

The latest moves highlight 
the different ways two large 
companies — IBM and HP — 
have chosen to protect their 
Linux customers. 

"Our belief is that the best 
way to deal with the SCO cam- 
paign is where it can truly be 
resolved — in court," said IBM 
vice president of systems sales 
Bob Sampson in a letter to his 
sales staff. 



"We have decided it's in our 
customers' best interest to offer 
indemnification to any compa- 
ny who acquires Linux directly 
from HP with a standard sup- 
port contract — after Oct. 1, 
2003," said Donna Bloechl, 
HP's analyst relations manager. 

IBM, which filed the addi- 
tional countercharges several 
days after HP announced in 
late September its intention to 
indemnify its customers, said it 
believed most indemnification 
policies run counter to the spir- 
it of open source. For example, 
HP's indemnification requires 
its Linux customers not to alter 
the Linux code. 

"HP is just exercising an 
option for people who want to 



Sometimes, Requirements Require a Picture 

Telelogic supports UML 2.0 in new DOORS/Analyst product 



BY DAVID RUBINSTEIN 

Hoping to provide a common 
language throughout its tool set 
to help improve communication 
among the different depart- 
ments impacting an application, 
Telelogic AB this month released 
a new DOORS/Analyst require- 
ments management tool based 
on the new UML 2.0 specifica- 
tion, and plans to tie it to its 
updated Tau/Architect and 
Tau/Developer tools by the first 
quarter of next year, the compa- 
ny has announced. 

"We know UML is used 
downstream, so we said let's 
move it upstream," said Bill 
Shaw, vice president of life- 
cycle solutions. "We want to 
break down communication 
barriers between systems engi- 
neers and software, and systems 
and hardware." 

Shaw claimed Telelogic is 
the first company to release 
products that conform to the 
new UML 2.0 specification, 
which is in the finalization 
phase at Object Management 
Group Inc., which oversees the 
specification. He touted new 
capabilities such as the ability 
to model architectural struc- 
tures and interactions. "To soft- 
ware guys, [UML 2.0] is just 
another rev. But the systems 
engineers who never were into 
it before are now taking notice." 

Shaw also said Telelogic is 



the first company to bring mod- 
eling capability into a require- 
ments management tool. He 
indicated there has been a dis- 
connect between most require- 
ments management tools and 
diagramming tools such as 
Visio, because users would have 
to switch back and forth 
between them and it was diffi- 
cult to keep the graphical and 
textual representations in sync. 

With DOORS/Analyst, he 
claimed, a user can write the 
text of a use case and automati- 
cally generate a diagram from 
that, or the user can start with a 
diagram and have the text fill in 
beneath it automatically. "We're 
not forcing you to become a 
UML expert before you can 
draw a diagram," he said. 

The tool can work with all 
UML Diagrams except Activity 
Diagrams, but there is a Flow- 
chart Diagram that acts as kind 
of a subset of the Activity Dia- 
gram, Shaw said. When the 
integration with the Architect 
and Developer tools is complet- 
ed, the models will be able to 
be reused in later phases of 
development, all while main- 
taining full traceability between 
the model and the require- 
ments through each phase. 

The Architect and Develop- 
er products also were updated 
last month to enable a graphi- 
cal "compare and merge" fea- 
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A model of requirements can be created in DOORS/Analyst. 



ture to allow as many as four- 
way comparisons of models 
before accepting a change, 
according to Per Blysa, vice 
president of product manage- 
ment for the Tau family. 

Other enhancements include 
an C code generator for embed- 
ded real-time systems, and the 
ability by users to lay their own 
defined symbols over the UML 
symbols to create diagrams that 
have more meaning, Shaw said. 
As an example, he said users 
would not have to use a stick fig- 
ure of a human to represent a 
cellular phone. Also, the ability 
to automatically create models 
from diagrams that don't have 
definitions, and to simulate sys- 
tems without a complete model 



to better verify behaviors early 
in development, have been 
added. 

DOORS/Analyst sells for 
US$2,395 or €3,060 for a node- 
locked license, or $5,995 and 
€7,660 for a floating license for 
up to three users. DOORS 
licensees looking to upgrade to 
DOORS/Analyst will pay $395 
or €504 for a node-locked 
license, or $995 or €1,271 for a 
floating license. 

Tau/Architect sells for $6,095 
for a node-locked license and 
$9,995 for a floating license, 
while Tau/Developer sells for 
$11,995 and $19,995 for node- 
locked or floating licenses, 
respectively. The price is the 
same for the U.S. and Europe. I 



feel safer," said Bill Claybrook, 
research director at Aberdeen 
Group Inc., in Boston. "[Simi- 
larly,] people who develop 
open-source software generally 
don't have a warranty, but that 
doesn't mean they can't." 

IBM based its claims largely 
on an explanation of the GPL, 
under which Linux founder 
Linus Torvalds originally dis- 
tributed his operating system. 

"SCO accepted the terms of 
the GPL by modifying and dis- 
tributing Linux products," IBM 
said in its legal filing. "By dis- 
tributing Linux products under 
the GPL, SCO agreed, among 
other things, not to assert — 
indeed, it is prohibited from 
asserting — certain proprietary 
rights over any programs dis- 
tributed by SCO under the 
terms of the GPL. SCO also 
agreed not to restrict further 
distribution of any programs 
distributed by SCO under the 
terms of the GPL." 

In response, SCO issued a 
public statement that it did not 
believe IBM's claims would 
stand up in court because they 
were based on the GPL. 

"The GPL has never faced a 
full legal test, and SCO believes 
that it will not stand up in court. 
We are confident that SCO will 
win the legal battle that IBM 
has now started over the GPL," 
the statement said. It asserted 
that the GPL was fashioned to 
"supplant current U.S. copy- 
right laws." 

"We believe that by trying 
to protect the GPL, IBM is 
really opening a big can of 
worms," said SCO spokesman 
Blake Stowell. Although much 
open-source software is based 
on the GPL, Stowell said his 
company was not against 
open-source software, point- 
ing out other licenses such as 
the Apache Software Founda- 
tion and Berkeley Software 
Development. 

Earlier in September, SCO 
filed a motion to dismiss Red 
Hat's pending suit against it. In 
its motion, SCO contends that 
the suit, which charges SCO 
with unfair competition, false 
advertising, unfair and decep- 
tive acts, trade libel and inter- 
ference with prospective eco- 
nomic advantage, is without 
grounds and that Red Hat's sole 
reason for the suit is to defend 
itself against a suit from SCO 
that has not been filed. 

Such motions are common, 
said Webster Knight, a Wash- 
ington, D.C., attorney who has 
been following the cases. I 
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Rogue Wave Thinks SOAs, Java 



Growth of the company not centered on C++ tools, components 



BY ALAN ZEICHICK 

When developers think about 
Rogue Wave Software Inc., 
they're likely to think about 
the company's long-standing 
family of C + + tools, such as 
the SourcePro component 
library or Stingray GUI kit. 
But Kathleen Brush is rebuild- 
ing the company to look be- 
yond C + + toward the growing 
service-oriented architecture 
(SOA) market. 

Brush took over as president 
and CEO after the ouster of 
John Floisand in February of this 
year; Thomas Atwood, a board 
member, assumed Floisand's 
role as chairman. Since that 



time, the struggling company has 
replaced its CFO but continues 
to show falling revenues. Its 
third-quarter results, announced 
in July, showed a 28 percent 
decline from the same quarter in 
2002, and Rogue Wave has had 
many rounds of layoffs. Yet the 
company increased its cash 
reserves and has shipped new 
products, including an update to 
SourcePro and its LEIF Web 
services framework. 

What's the future of Rogue 
Wave? In an exclusive interview, 
SD Times asked Brush, whose 
qualifications include a previous 
role with Rogue Wave as vice 
president of marketing and engi- 



neering, and a Ph.D. in manage- 
ment and international studies, 
for her vision for the company. 

"The company is very 
healthy," insisted Brush. "We're 
healthier from a financial per- 
spective — healthier than we 
have been for many years. I 
believe that our employees are 
motivated, and they're squarely 
behind the new strategy and the 
overall success of Rogue Wave." 

Brush is putting her acade- 
mic background to good use: 
"We did something at Rogue 
Wave that's different than in the 
past — we spent eight months of 
concerted research and analysis 
to determine what would make 



WS-I Tools Around 

With Compatibility 

Test suite shows if Web services 
conform to the Basic Profile 



BY YVONNE L. LEE 

Is compatibility finally coming 
to Web services? That's been 
the promise from the start, but 
thanks to tools being released 
next month by the Web Ser- 
vices Interoperability Organiza- 
tion (WS-I), the technology is 
inching closer to that goal. 

In November, WS-I will 
release a set of testing tools for 
developers to verify that Web 
services meet the conditions 
set forth in the WS-I Basic 
Profile, which the consortium 
completed in August. 

The testing tools are 
designed to ensure there is no 
ambiguity in how to implement 
Web services that interoperate 
even when they are developed 
with tools and platforms from 
different manufacturers. A set 
of sample applications is due by 
year's end. 

"It's one thing to look at the 
documents; it's another thing 
to look at the code and tinker 
with it," said Tom Glover, 
chairman of WS-I. Although 
the Basic Profile itself was 
delayed from June until 
August because the working 
group discovered incompati- 
bilities late in the development 
cycle, the testing tools are 
moving along as scheduled and 



are due for a November 
release, Glover said. 

Each of the three parts — the 
Basic Profile, tools and sample 
applications — represents a step 
toward building applications 
that work together, Glover said. 

When WS-I released the 
profile itself in August, vendors 
and end users could for the 
first time review the final docu- 
ments and begin applying the 
guidelines to building applica- 
tions. When the test suites are 
released, they can verify that 
the applications actually meet 
the requirements. 

Those tools include a moni- 
toring application and an 
analysis package that uses the 
data gathered by the monitor- 
ing application. The Web Ser- 
vice Communication Monitor 
captures and stores messages 
exchanged between Web ser- 
vices and the software that 
invokes them. The Web Service 
Profile Analyzer evaluates mes- 
sages captured by the Monitor, 
and validates the description 
and registration artifacts of the 
Web service. Those artifacts 
include WSDL documents that 
describe the Web service, and 
the XML schema files that 
describe the data types used in 
the WSDL service definition 



FIRST OF A 
THREE-PART SERIES 



Today: How WS-l's Basic Profile 
and its tools are trying to make 
multivendor, multiplatform interop- 
erable Web services. 
Nov. 1: Are vendors 
implementing the Basic Profile? 
Nov. 15: Developers talk about 
their interoperability issues. 

and the UDDI registration 
entries. The Analyzer's report 
indicates whether a service 
meets the WS-I Basic Profile 
and what needs to be changed to 
bring a nonconformant service 
into compliance. 

When the sample applica- 
tions are released, organizations 
can see how others have created 
conforming services in either 
.NET or Java, said Glover. They 
can then base their applications 
on the samples. 

Although WS-I has created a 
profile for interoperability, it is 
neither a standards body nor a 
testing body. The group works 
with standards set by vendor 
consortia and genuine stan- 
dards bodies such as the W3C. 

"The Basic Profile is based on 
SOAP 1.1, WSDL 1.1 and 
UDDI 2.0," said Mark Hapner, 
Sun Microsystems Inc.'s Web 
services strategist. The experts 
who drafted WS-I's Basic Profile 
looked at these standards and 
then limited them. "Fundamen- 
tally, the profile is the work of 
experts who have looked at 
the original specification and 
tried. . .to remove ambiguities by 
constraining things so there's less 
there," Hapner said. "When they 
looked at that constrained use, 
► continued on page 18 



sense for a strategy and direc- 
tion. In doing that, we've jetti- 
soned 10 product ideas because 
we have stringent criteria for 
what we would find to be a suit- 
able direction and strategy." 

Indeed, she said, "the direc- 
tion and strategy that we've 
solidified the company around 
is one that we're comfortable 
with, because it met all of the 
criteria." Brush explained, "We 
did a textbook strategy develop- 
ment process, including a com- 
prehensive strengths, weakness- 
es, opportunities and threats 
analysis." 

The upshot of that research? 
"We are now a company that's 
focused on leveraging opportu- 
nities that are afforded to us 
through the development of 
service-oriented architectures," 
she announced. "This opportu- 
nity gives us growth potential in 
a new area outside of C++." 

BEYOND C++ 

Brush acknowledged that to 
many customers, and in fact to 
the industry, Rogue Wave is 
nearly synonymous with C + + , 
and that the company isn't 
known for its expertise in other 
areas. "But there is a point in 
the life of every tech company 
where the competencies that 
you have lose value, because 
they're attached to a declining 
technology. 

So, she continued, "in addi- 
tion to C++, we also understand 
application development. A lot 
of the skills that we have, and 
the other strengths that we have, 
like our customer base, are tied 
to application development. 
Service-oriented architectures 
open up opportunities under a 
new architecture." 

The challenge for Rogue 
Wave is to move from its libraries 
and components market into the 
bigger arena of SOAs — which 
may mean competing against the 
likes of BEA and IBM. "We've 
done in-depth analysis of every 
company that we saw playing a 
role in SOA," Brush said, "and 
we understand what position we 
can solidify ourselves around, to 
continue to be successful." 

Brush continued, "But how 
do we get from where we are to 
where we want to be? Our plan 
revolves around the LEIF prod- 
uct. LEIF gives us an entree 
into Java and .NET develop- 
ment, by virtue of allowing C+ + 



applications to connect to those 
other environments. It also gives 
us an entree into SOA by fabri- 
cating Web services." 

That leads to new products, 
Brush said. "From the research 
that we've done, we see that fol- 
lowing fast on the need for fabri- 
cating services is the need to 
manage those services, monitor 
those services and connect those 
services," she added. "We see a 
natural lead-in for us with 
assembly and orchestration, and 
Web services management. We 
also see that we can leverage the 
inroads that we make with LEIF 
to branch into a new area, and 
solidify a reputation as bona fide 
player, which give us an oppor- 
tunity to move outside our tradi- 
tional C++ customer base." 

Rogue Wave is taking an 
industry-standard view of SOAs, 
Brush explained. "We've used 
the Gartner model of the 'seven 
phases of SODA [service-ori- 
ented development of applica- 
tions]' to build our strategy 
around. A lot of the reason is 
because they put together a 
model, and it helps us to be able 
to talk in the same terms as one 
of the leading analyst firms." 

Despite the new direction, 
Brush insisted, "we are firmly 
committed to our customer 
base, both in the SourcePro 
side and the StingRay side." 

JAVA AND .NET? 

Brush indicated that there are 
two particular areas of product 
development. "We are investing 
significantly in LEIF. You should 
expect to see a lot of new devel- 
opments coming out of the 
LEIF team, which would solidi- 
fy our position in Web services, 
and in other types of services 
that would be connected to a ser- 
vice-oriented architecture. 

"Beyond that for new prod- 
ucts, we are focused on assembly 
and orchestration, and Web ser- 
vices management, as additional 
products," she continued, adding 
that "to complete our new prod- 
uct strategy, Rogue Wave's plans 
call for a combination of partner- 
ships of different types and inter- 
nal development." 

The new products won't be 
centered on C++, Brush said. 
"Those new products will pro- 
vide us with an avenue to enter 
into new languages. The area of 
focus now is Java, but we're keep- 
ing our eye on the adoption of 
.NET languages," she explained. 

"We want to help people 
realize the vision of service- 
oriented architectures," she 
concluded. I 
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Breathing New Life 
Into Legacy Systems 

OMG task force seeks to standardize 
methods for data, app transformation 



BY DAVID RUBINSTEIN 

An RFP allowing interoperability 
among applications and data residing on 
different platforms and written in dif- 
ferent languages is expected to be 
issued by Object Management Group 
Inc.'s Legacy Transformation Task 
Force at the organization's meeting next 
month in London. 

Approximately 40 software vendors 
and customers are participating in the 
effort, according to William Ullrich, co- 
chairman of the group and president of 
Tactical Strategy Group Inc., a consult- 
ing firm specializing in organizational 
and information transformation. 

The group is using a broad definition 
of what a legacy system is — "any produc- 
tion-enabled system regardless of lan- 
guage or platform is a 
legacy system," Ullrich 
said — because narrowing 
that down eliminates too 
many systems, he indicat- 
ed. "There are organiza- 
tions that will take you 
from .NET and Visual 
Basic to J2EE, or from 
Java to .NET and C#, 
so it's migrating from an 
accepted new modern 
platform to another ac- 
cepted new modern plat- 
form," Ullrich said, demonstrating that 
legacy transformations involve more 
than moving data off of mainframe sys- 
tems into more modern architectures. 

In fact, companies such as WRQ, 
NetManage and Attachmate, with which 
Ullrich has had discussions, "clearly all 
should participate," he said. Marcus 
Nitschke, Attachmate s marketing vice 
president, said the company is in the 
process of joining OMG. "We're very 
much on board [with the OMG stan- 
dards initiatives] and look forward to 
actively participating in the legacy trans- 
formation group," he said. "From a strat- 
egy perspective, it's interesting to see an 
industrywide effort to take a more stan- 
dardized approach" to solving legacy 
issues, he added. Also already on board 
with the project are Cisco, Hewlett- 
Packard, IBM, Nortel and Unisys, as 
well as smaller companies such as 
KLOCwork, a source-code analysis and 
design tools vendor; and Anubex, a 
migration methodologies and migration 
tools company. 

The first step in legacy transforma- 
tion, Ullrich said, is the analysis of exist- 
ing applications and systems, as well as 
the intangibles that help provide an 
understanding of the scope of the legacy 



TRANSFORMATION 
TIME LINE 



Feb. 15, 2004: 

Letters of intent to submit 
RFP are due. 

January 2005: Final 
evaluation and selection 
by task force. 

May 2005: Board of 
directors votes to adopt 
specification. 

Source: Object Management Group Inc. 



environment. The intangibles could be 
business processes, or a function called 
"pricing," he explained. 

So the first RFP (www.omg.org 
/docs/lt/03-09-01.pdf) calls for an inter- 
operability metamodel that allows a 
cross-section of an organization's applica- 
tions, that typically are written in two or 
three different languages and reside on a 
couple of different platforms, to be rolled 
into a common view. One of the goals is 
to allow information about the structure 
and assets of the legacy system to be 
shared among different vendors' tools, 
and give the vendors an opportunity to 
provide a transformation solution that 
can take advantage of other tools cus- 
tomers might already employ, he said. 
The group's road map then calls for a 
second RFP to define tar- 
get metamodels, such as 
J2EE or .NET, to which 
the defined legacy arti- 
facts can be specified. 
Many of these metamod- 
els already have been 
completed as part of other 
OMG efforts, Ullrich said. 
The third RFP will define 
mappings from the plat- 
form-independent inter- 
operability metamodel to 
the targets, and the fourth 
RFP involves metrics that can be derived 
from the first three proposals, he said. As 
an example, Ullrich said an application 
could have 35 business rules that relate 
to it, and of those rules, 30 need to be 
redeployed in the target metamodel. This 
process can give an organization metrics 
it can use as it begins to redeploy the 
legacy assets, he explained. 

Ullrich said the initiative is such an 
important one that companies such as 
MicroFocus and Relativity joined 
OMG simply to be involved in this 
effort. "We're not preaching to the 
choir," he said. "There are people com- 
ing in new who don't know any of [the 
older OMG standards]." 

He did say that OMG's eMOF— 
Essential Meta Object Facility, which 
provides the minimal set of elements 
required to model classes in an object- 
oriented system — is the minimal level 
of Model Driven Architecture required 
to participate in creating the proposals, 
and the model definitions must be done 
in UML. "We want to leverage as much 
as we can from pre-existing work in 
OMG," Ullrich said. "You'll see the real 
convergence of these standards with 
the second and third [legacy transfor- 
mation] RFPs." I 
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Sun Creates New Constellation Around Java Name 

Software rebranding seeks to tighten ties between 'standards' and own products 



BY YVONNE L. LEE 

Sun Microsystems Inc. is bet- 
ting that a low price, simplified 
product structure and frequent 
release schedule will make cus- 
tomers want to choose its serv- 
er software stack — not Web- 
Sphere, WebLogic or .NET. 

The Santa Clara company 
announced new names and 
organizations for its software 
products at its Sun Network 
Conference in mid-September. 

At the core of the new struc- 
ture is the Sun Java Enterprise 
System, comprising the Sun 
ONE software stack, and a new 
all-inclusive bundling scheme 
referred to as Project Orion. Sun 
began talking about Orion in 
February of this year, announc- 
ing its intention to simplify pric- 
ing and to encourage customers 
to standardize on the entire 
suite of Sun software, from serv- 
er to desktop to cellular phone. 
With the new pricing model, the 
Java Enterprise System is priced 
at US$100 per employee. 

The Java Enterprise System 
is a rebranding of a rebrand- 



ing. In April 2002, Sun bun- 
dled products that had been 
part of its iPlanet constellation 
with its Forte development 
tools and ChiliSoft tools for 
porting ASP applica- 
tions together under 
the name Sun ONE. 
The Java Enterprise 
System platform is 
priced at $100 per 
employee per year, 
with an unlimited 
right to use in Inter- 
net applications. 

With its new brand 
name, Sun appears to 
be trying to increase 
the linkage between 
Java and its own prod- 
ucts. Independent software ven- 
dors wondered whether by using 
the name Java in its products, 
Sun is exerting a proprietary 
hold over a brand it had previ- 
ously allowed the whole Java 
development community to use. 

"As far as the branding goes, 
I'm a bit confused," said Marc 
Fleury, president of The JBoss 
Group. "Java is Sun's brand, so 




Many think 'Sun is 
murkying the waters' 
with the Java name, 
says JBoss' Fleury. 



they can do what they want, but 
a lot of partners are saying Sun is 
murkying the waters. It used to 
be that they would keep [Java] 
more generic. What Sun is say- 
ing now is that Java is 
a company brand." 

"I don't read it as 
being as insidious as 
that," disagreed Rikki 
Kirzner, research di- 
rector at IDC. "It 
reminds people that 
Sun is in the Java 
business. They're not 
going to use [the 
word Java] on some- 
thing that doesn't run 
Java or isn't Java 
based. In light of how 
much IBM's done with Java, it's 
a good idea for Sun to say, 'Oh 
yeah, we have Java, too.' " 

The Java Enterprise System 
includes Sun ONE Directory 
Server, Identity Server and 
Directory Proxy Server, the Sun 
ONE Application Server, 
Sun ONE Message Queue, Sun 
ONE Web Server, Sun ONE 
Messaging and Calendar Ser- 



vers, Instant Messaging and Por- 
tal Servers, as well as Sun Clus- 
ter availability services. It runs 
on Solaris for SPARC and x86. 

Also part of the rebranding is 
Project Mad Hatter, a collection 
of desktop software intended to 
take the place of Microsoft's 
Office suite and related prod- 
ucts. The collection of software 
now will be called the Java 
Desktop System and will sell for 
$100 per desktop or $50 per 
employee as an add-on to the 
Java Enterprise System. The 
major software components are 
Linux; GNOME 2.2 Desktop; 
the Mozilla 1.4 Web browser; 
Evolution 1.4 e-mail, calendar, 
address book and task list client 
for the Sun ONE Calendar 
Server; StarOffice 7 office pro- 
ductivity software; and a J2SE 
1.4 runtime. 

Sun Java Studio, a set of 
Java developer tools, includes 
the former Sun ONE Studio 
IDE, connector builders, plug- 
ins and the Sun Java Enter- 
prise System runtime. It costs 
$5 per employee as an add-on 



to the Java Enterprise System. 

Sun's Nl grid computing 
platform, which is still in beta 
test, also will be part of the Java 
Enterprise System, and accord- 
ing to a company spokesperson 
will have a name reflecting the 
Sun and Java branding when it 
is released. 

Sun also slapped its new 
branding onto its J2ME and 
Java Card offerings, calling 
them Sun Java Mobility System 
and Sun Java Card System. 

In addition to reorganizing 
its software products, Sun an- 
nounced at the show that it will 
reorganize its release schedule, 
with updates released quarter- 
ly. Stuart Wells, Sun's senior 
vice president of market 
development, said he believes 
that third parties will be able 
to test products more effi- 
ciently if fresh versions of 
Solaris, Java and related prod- 
ucts are available. 

The lowered price and fre- 
quent releases are geared toward 
getting more third-party applica- 
tions on board, Wells said. I 



Ink Dries on .NET Components 

Infragistics claims to be first vendor to ink-enable WinForms apps 



BY ALAN ZEICHICK 

Calling its latest components the 
industry's first to ink- enable 
applications written for Micro- 
soft's Tablet PC, Infragistics Inc. 
in early October shipped its 
NetAdvantage 2003 Volume 3 
suite for .NET The component 
set, offered as part of the compa- 
ny's subscription offering, also 
includes new charting and calen- 
dar components. 

Developers can ink-enable 
nearly any Windows Forms 
application, according to Brad 
McCabe, the company's tech- 
nology evangelist, allowing pen 
input on pen-equipped PCs 
running Microsoft's Windows 
XP Tablet PC Edition. Further, 
he said, the company has 
exchanged ink capability 
beyond what Microsoft offers in 
its own pen-input panel. 

"Our pen-input panel is very 
similar to Microsoft's, and that 
was by design. We both have 
the same blue writing area and 
lines," he said, "so that it makes 
sense to a user familiar with the 



Tablet PC. But with 
ours, where I drop 
down the form, that's 
where my pen-input 
panel is — as opposed 
to [Microsoft's panel] 
on the bottom of the 
screen." 

Also, he said, 
Infragistics' pen panel 
lets users move a cur- 
sor interactively to 
change their editing 
position, or highlight 
and replace letters. It 
also provides a drop- 
down menu to modify, 
delete or rewrite text. 
"We also gave you a 
symbol pad, a numer- 
ic pad or whole func- Unlike Microsoft's pen-input panel, bottom, UltralnkProvider offers instant feedback 
tional keyboard" that's on the recognition of gestured letters, numbers or symbols. 
instantly accessible, he 
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said, for those who prefer to tap 
out their input, or forget the pen 
gestures for specific symbols. 

McCabe explained, "We're 
using the Microsoft recognizer 
that's built into the Tablet PC 
operating system. That means 



[our component] will run on 
any flavor of the Tablet PC." So, 
it runs on English, Japanese or 
other versions of the pen-based 
system, he said. 

A big change is that Infragis- 
tics provides an instant preview 



of the recognized symbols, said 
McCabe, giving the user a 
chance to correct mistakes 
before submitting the input to 
the application. By contrast, 
Microsoft's panel submits the 
recognized characters directly 



to the apps. "We show it to you; 
you can choose to accept it, cor- 
rect it or cancel it." 

The new pen capabilities 
work across all of Infragistics' 
Windows Forms .NET compo- 
nents, said McCabe. "Because 
all of our components are built 
on top of one common core 
framework, all of our embedda- 
ble editors, drop-down [menus], 
masked fields, test boxes, are all 
now ink-enabled." If you want 
to make an application pen- 
ready, he said, "grab the non- 
visual UltralnkProvider, drop it 
onto the form. Our controls 
sense that the provider is there, 
and if you're on a Tablet PC, 
they become ink-enabled." If 
the application is running on a 
non-Tablet device, it still runs 
and doesn't incur extra over- 
head, he added. 

Other enhancements added 
to this release of the Infragis- 
tics component set include 
upgrades to its Windows Forms 
grid, charting and scheduler 
components. There also are 
new date chooser and calendar 
components added to its 
ASP.NET components. The 
subscription price of the suite is 
US$695 per year, and includes 
updates and source code. I 
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Meet the 
.NET Developer's Boss 

It's been 18 months since her developers got their hands on Visual Studio .NET, and 
they all like what they see. Microsoft's new C# language has taken hold of many of 
the C++ developers, and while some of the VB programmers are still overwhelmed by 
the changes, others have guickly adapted to .NET. 

And speaking of platforms, her CTO insists that all applications written and de- 
ployed on .NET be fully interoperable with the rest of the organization's hosts 
and J2EE server applications, as well as legacy Windows systems. These days, that 
means Web services. No wonder she was chosen to chair 
the company's executive IT planning committee on 
Web services standards and adoption. 

What does she read? Not the code-centric 
programming monthlies. She needs to know about 
products, standards, alliances, initiatives, the NEWS 
and what it all means. That's why she reads SD Times. 
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your career. You"! be amazed how 
quickly your charting muscle grows. 
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J Boss, Sun Bury the Hatchet 



Open-source app server vendor accepts invitation to join JCP 



BY YVONNE L. LEE 

Longtime outsider JBoss 
Group LLC in September put 
aside its differences with Sun 
Microsystems Inc., paid its 



US$5,000 and is now a mem- 
ber of the Java Community 
Process, the group that directs 
the destiny of Java. 

The two companies have 



long locked horns over J2EE 
compliance. Sun charged that 
JBoss didn't want to test its 
application server because that 
would prove it is not compati- 



ble, while JBoss claimed that 
Sun kept prices for compliance 
testing too high for a small mak- 
er of open-source software. 
"I sent [JBoss president] 
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Marc Fleury an e-mail about a 
month ago," said Onno Kluyt, 
director of Sun's JCP program 
office. "Marc answered back in 
five minutes and said that 
would be a good idea." 

The relationship between 
Sun and JBoss has been icy, but 
Fleury said he viewed the invi- 
tation as a step toward a thaw. 
"We took that as a gesture from 
Sun of a warming relationship," 
Fleury said. "After [having 
been branded] as standards 
renegades in the press, we were 
almost relieved to see them 
extend an olive branch." 

Members of the JBoss 
Group individually have been 
active in the Java Community 
Process, but the company itself 
had not joined the consortium, 
Fleury said. 

Before forming the JBoss 
Group, Fleury had worked 
with a company called Telkel, 
which was a JCP member, said 
Kluyt. "Marc and I were 
exchanging e-mails about how 
he could move the member- 
ship from Telkel to JBoss," 
explained Kluyt. 

According to Fleury, JBoss 
plans to use its membership in 
the JCP to promote aspect-ori- 
ented programming into the 
Java platform; the company 
includes AOP features in its 
app server, and has been col- 
laborating with IBM on 
AspectJ, a programming lan- 
guage originally developed at 
PARC that uses aspect-orient- 
ed techniques. I 

ACTIVESTATE 

< continued from page 1 

see the contacts with the open- 
source community as a big 
competitive advantage," Jacob- 
sen said. As part of the deal, 
Sophos purchased O'Reilly's 
stake in the company. 

"I can tell you, the [Active- 
State] management team felt 
very comfortable with the 
whole picture," Jacobsen added. 
ActiveState had been working 
on some strategic deals with 
Sophos, and the acquisition 
grew out of that relationship, 
he said. "ActiveState was not 
shopping" to be bought, 
Jacobsen said. "Had we done 
that, we would have had other 
suitors that would have been a 
worse fit" than Sophos. 

Ascher said he does not 
expect many personnel changes 
because of the acquisition, and 
added that Sophos intends to 
maintain all product lines as 
they are. I 
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Sybase Enterprise Server 
Embraces Automation 



BY EDWARD J. CORREIA 

There's an operational gap with todays 
complex enterprise information systems: 
Database software can handle fast-chang- 
ing data, but human administrators have 
trouble keeping up. That's according to 
database developer Sybase Inc., which 
claims to address this problem 
with its Oct. 6 release of Adap- 
tive Server Enterprise 12.5.1. 
The company says it can auto- 
matically adapt to changing 
transaction patterns to opti- 
mize server performance. The 
new version also lets develop- 
ers expose stored SQL pro- 
cedures as Web services. 

"The ability for systems to Human resources lag 
handle the growth in storage behind system 
and transactions mechanically improvements, says 
has been moving along nicely," Sybase's Traubitz. 
said Tom Traubitz, Sybase's 
senior group product marketing manager. 
"But human resources for systems main- 
tenance, backups and keeping systems 
available have lagged behind." 

Traubitz claimed the new database 
server handles these problems with 
features like automated database expan- 
sion, memory allocation and job schedul- 




ing, all while the system is online. "These 
functions and adjustments of other 
parameters typically used to require a 
[database administrator] to configure. 
We've eliminated or automated many of 
these tasks to reduce the number of times 
a human being has to intervene." 

Traubitz said that for adminis- 
trators reluctant to give up system 
control, most of the automated 
functions can be configured to 
perform within set parameters. 
"They can control the functions 
to the degree they wish. Think of 
it as power steering in your car. It 
doesn't take away your control, 
but makes it easier to manage a 
couple of tons of vehicle." 

Also of interest to developers 
is the ability to expose stored 
SQL procedures as Web services, 
which Traubitz said can reduce 
the amount of custom coding that was re- 
quired before. "You can now allow [apps] 
or processes like a CRM system to log in 
and interchange data with the database." 
Sybase Adaptive Server Enterprise for 
Linux, Unix and Windows pricing starts 
at US$1,495 per server, including five 
user licenses. I 



NEW AMBERPOINT SOLUTION TAKES 
EXCEPTIONS TO APPLICATIONS 



BY YVONNE L. LEE 

In late September, Web services man- 
agement provider AmberPoint Inc. 
introduced a software package designed 
to reduce exceptions — the errors that 
come about when a program doesn't 
have the code to handle an unexpected 
operation or condition. 

AmberPoint's Exception Manager is 
designed to detect operational errors and 
unusual business cases before they can 
cause computer disruptions or impact the 
costs to a business. 

It tries to pick out problems that may 
not have been anticipated during the 
development or testing phases of an 
application. 

Vice president of marketing Ed 
Horst gave the example of an airline 
that had to honor tickets for $25 after 
such a promotion mistakenly appeared 
on its Web site. With Exception Man- 
ager, a user could specify a threshold 
below which the application would not 
accept a value, and then direct the 
Web service to take some kind of cor- 
rective action. 

Although the Exception Manager is 
designed to collect information about 



Web services as they are running, orga- 
nizations must manually define what an 
exception is. Users can define excep- 
tions based on SOAP faults, error mes- 
sages or faulty business logic. 

Organizations would create the gross 
overarching rules and then modify them 
over time, Horst said. "You tend to 
[make rules] broadly at first and more 
particularly over time," he said. 

When users enter exceptions into the 
Exception Manager, they can configure 
it to send e-mail messages to managers 
for higher-priority errors or to simply log 
the errors that are less damaging. 

Exception Manager collects informa- 
tion from throughout a Web service sys- 
tem to help pinpoint where the error 
occurred. It works by placing agents in 
the Java or .NET system, as well as in 
the database and corporate information 
packages, such as those from SAP. 

Pricing starts at US$50,000 and does 
not vary based on the number of 
servers, because the Oakland, Calif., 
company said that would discourage 
scaling the applications. However, the 
officials declined to state the basis on 
which it did vary. I 
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, COMPANIES , 



Key3Media Group Inc., the spinoff from Ziff-Davis that owns the 
Comdex and Networld+lnterop shows and also produces JavaOne for 
Sun Microsystems Inc., has renamed itself MediaLive International 
Inc. . . . InstallShield Software Corp. and Intraware Inc. are offering 
a Web-based software updating system that combines InstallShield's 
installer with Intraware's access controls. The purpose is to be able to 
deliver software patches quickly . . . Three divisions of the Swedish 
firm Enea Data— OSE Systems Inc., Enea Realtime and Enea 
TekSci— have been merged into one division, called Enea Embedded 
Technology. Enea's RTOS kernel still will be called OSE, and the com- 
pany has released a version of OSE and a set of board support pack- 
ages for Tl's OMAP ARM and DSP cores. 



, PRODUCTS , 



DataDirect for SQL/XML is the latest tool from DataDirect Technolo- 
gies Inc. The new utility lets SQL queries create XML structures using 
the SQL/XML extensions defined by the SQL 2003 standard. The util- 
ity includes a graphical query builder . . . Duvessa Software has 
released Estimate Easy Use Case, a tool that converts use-case data 
from IBM's Rational Rose or other XMI-compliant modelers into use- 
case points, and from there, can provide manpower estimates for a 
project. The software costs US$39.99, or $89.99 with import capabili- 
ties . . . Atalasoft Inc. has released a version of its dotlmage imaging 
component for .NET. Previously offered only for ActiveX, dotlmage is 
a class library with functions for cleaning up scanned images . . . 
Helsinki, Finland-based Aivosto Oy is offering version 7 of Project 
Analyzer, a static analysis tool for Visual Basic. The new version works 
with VB.NET 2003, and can delete code that's not needed at runtime, 
such as invisible controls and uninstantiated classes. Project Analyzer 
costs US$199 . . . Version 4 of Ch, the C/C++ interpreter from Soft- 
Integration Inc., adds syntax highlighting to its vim editor for Windows, 
and has an improved GTK+ toolkit . . . DataPower Technology Inc. is 
offering firmware updates for its XS40 XML Security Gateway and 
XA35 XML Accelerator appliances to allow them to validate and 
accelerate the WebSphere MQ messaging protocol. DataPower 
licensed the protocol from IBM . . . The Apache Software Foundation's 
Jakarta project has released version 2.3 of its Turbine Web application 
framework; version 1.3 of Regexp, a regular expression package writ- 
ten in Java; and version 2.0 of Commons Lang, a set of Java libraries 
for enhancing classes in java.lang and java.util. These are primarily 
maintenance releases . . . InstallShield Software Corp. has replaced its 
InstallShield Developer and InstallShield Professional with a new 
product, DevStudio 9. This Windows-only installer builder also can tar- 
get Windows CE and Windows Smartphone devices, and can plug into 
Visual Studio .NET. The software costs US$1,199 . . . AppForge Inc. has 
released a version of its MobileVB tool suite, which offers Visual Basic 
for non-Microsoft platforms. Version 4 now has runtimes for Palm OS 
5 and Nokia Series 60 devices. The company also has decided to offer 
the runtime at no cost— a shift in policy. The IDE costs US$899 per 
seat . . . Teamplate Inc. has updated its Teamplate for .NET collabo- 
rative workflow software. Version 4.0 is now compatible with Visual 
Studio .NET, and can bind Teamplate actions into XML data objects 
. . . Neon Systems Inc. is offering a new host integration product, 
called Shadow Event Publisher, that enables mainframe events to be 
captured in real time and pushed to business processes, using HTTP 
and message-queuing protocols, running on other servers. 



PEOPLE 



After reported disagreements with Motorola Inc.'s board, chairman 
and CEO Christopher Galvin resigned, saying he would leave when a 
successor is named . . . PalmSource Inc. has named Larry Slotnick 
as chief products officer and David Limp as SVP of corporate and 
business development. Slotnick had been with Palm; Limp had been 
chief strategy officer of Liberate Technologies Inc. . . . Volker Dolch, 
a microprocessor designer, inventor of 16 UPC bar-code algorithms, 
and founder of a company that made industrial-strength portable 
computers, passed away in mid-September. He was 59. 1 



A Help in Gaining Control of Help 

Updated RoboHelp focuses on file management 



BY ALAN ZEICHICK 

The latest version of RoboHelp, 
to be released in November by 
eHelp Corp., expands the multi- 
platform help authoring system 
to be able to reuse data in for- 
mats such as PDF and XML, 
and adds new collaborative and 
data- sharing capabilities. 

"The biggest new feature is 
content management," said 
Mike Hamilton, product man- 
ager for the software. 

According to Hamilton, large, 
complex help and documenta- 
tion projects can have tens of 
thousands of distinct files, and 
dozens of help authors, and 
keeping all of those documents 
and graphics organized requires 
sophisticated content-manage- 
ment functionality. "That's a lot 
of data to keep control of," he 
said, "so we're including new 
source-control technology with 
RoboHelp. There's no extra cost; 
it can be used locally by a single 
author, to provide version con- 
trol, or it can be installed in a 
network area so that multiple 
authors can access it." 

There are no set limits to the 
number of authors who can 
share a specific project, Hamil- 
ton said, but only one author 
can be using a specific file at a 
time, due to file-level locking. 
The content-management fea- 
ture, which is called Robo- 
Source Control, is built into 
RoboHelp X5. Alternatively, he 
said, developers can now use 



existing source-control systems 
like Borland's StarTeam or 
Microsoft's Visual SourceSafe 
to provide versioning and docu- 
ment control. 

The other big push is to 
improve content reuse, such as 
being able to import external 
documents and data files and use 
them to build RoboHelp help 
projects, or to export RoboHelp 
projects to other media. While 
RoboHelp already imports 
graphics and common types of 
data files such as Word docu- 
ments, Hamilton said, the new 
release extends import/export to 
Adobe's Portable Document 
Format, XML and Sun's Java- 
Help 2.0 format. 

RoboHelp already had al- 
lowed XML output, said Hamil- 
ton. The new import features 
can work with common XML 
schemas, and also can work with 
XML documents that aren't 
already styled, he said. "You can 
use the RoboHelp editor to 
build a handler, and then import 
your own custom schema. But 
out of the box we support 
XHTML and DocBook, which 
are the two most common 
[schemas] for technical writers." 

The PDF import features 
were much trickier, according to 
Hamilton, because "if you crack 
open a PDF file, there really is 
no style data. It's just a huge 
amalgamation of individual 
character styles [designed] to 
cause an on-screen representa- 



tion. To import it meaningfully, 
we need to be able to have style 
information to decide what's a 
heading, what's body text, and 
identify other information." 

The solution, he said, was to 
develop algorithms that analyze 
the PDF document structure 
and build an on-the-fly style 
guide. "If 90 percent of the doc- 
ument is Arial 10 point, there's a 
good bet that it's body text," he 
said. "That allows us to pull in a 
30-page PDF document and 
intelligently break it into topics 
for a help system. It's not import- 
ed as bitmaps; it's actual, editable 
text. If it's a bulleted list in PDF, 
it's a bulleted list in RoboHelp." 

Examples of when a help 
author would want to use that 
feature would be when the 
source document for the PDF 
was not available, he said, or if 
someone is incorporating other, 
existing documents into an on- 
line document or reference. 

RoboHelp's support for Java- 
Help 2.0 was held up due to 
issues with the specification, said 
Hamilton. "Sun finally got off its 
horse after a year-and-a-half beta 
and released the thing." The 
JavaHelp 2.0 specification, 
which Sun's Java Community 
Process called JSR-97, was initi- 
ated in January 2001, and was 
expected to be released in Octo- 
ber of that year, but it was final- 
ized only in late August 2003. 

Pricing for RoboHelp X5 was 
not available at press time. I 
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The new PDF import capability can convert documents into HTML or treat their pages as bitmap images. 
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A Foothold in Java GUI-Building Market 



Instantiations acquires Eclipse plug-in SWT Designer 

BY DAVID RUBINSTEIN tools company late last month the nascent Java GUI-building ty, will continue to have an 

Instantiations Inc. has bought acquired SWT Designer, an tools market. Instantiations and ongoing relationship as the 

itself a Russian. application created by Konstan- Scheglov, a regular contributor product is developed, according 

More specifically, the Java tin Scheglov, to ante itself into in the IBM's Eclipse communi- to the company's CEO, Mike 
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Taylor. The terms of the acqui- 
sition were not disclosed. 
Instantiations sells the CodePro 
line of Java programming tools 
for IBM's WebSphere and 
Eclipse IDEs. 

"We are trying to stake out a 
strong position in that area," 
Taylor said. "We intend to start 
a new strategic product line of 
Java GUI-building tools." Tay- 
lor said Scheglov indicated to 
Instantiations that there are 
8,000 users of SWT Designer. 

SWT Designer was written to 
be a plug-in to the Eclipse open- 
source development framework, 
and Taylor said Instantiations 
intends to offer a Standard Wid- 
get Toolkit GUI builder for use 
atop IBM's Java IDEs, as well as 
a Swing/Abstract Window Tool- 
kit (AWT) version for those who 
want strict adherence to Sun's 
Java specifications. 

A 'RELIGIOUS WAR' 

As for what Taylor called the 
"religious war" between the 
SWT and AWT camps, Instanti- 
ations intends to steer clear of 
the battle. "We'll straddle the 
leading Java GUI-building tech- 
nologies," he said. SWT, he 
explained, supports native oper- 
ating-system widgets, while 
Swing requires an emulation 
layer to maintain its cross-plat- 
form functionality. 

"Natively, you get better 
performance and exactly the 
look and feel of the underlying 
operating system," Taylor said. 
"With Swing, you get more 
cross-platform portability, but it 
will look slightly different than 
a Windows user is used to, and 
you also have that emulation 
layer to go through, which 
impacts performance." 

At the time of SWT's intro- 
duction, Java developers were 
concerned that SWT GUIs 
would not run on other plat- 
forms. But, at their core, Taylor 
said, they're all still Java code, 
and he noted that Eclipse sup- 
ports Swing. 

Taylor said Instantiations, 
whose founders have roots in 
Smalltalk, wanted to move into 
the Java GUI market and that 
finding Scheglov saved the com- 
pany months of work. The deci- 
sion, he said, came naturally to 
the company. "Smalltalk compa- 
nies had the same religious war 
between native widgets and 
emulated widgets," Taylor said. 

SWT Designer works in 
Eclipse 2.1 and IBM Web- 
Sphere Studio 5.1 on Windows 
or Linux, according to the com- 
pany. It sells for US$199. I 
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CA Associates With Web Services 

Approach involves new and modified software, hosted offerings Si ] * f « « 



the WSDM, which the vendors 
have submitted to the Organiza- 
tion for the Advancement of 



BY YVONNE L. LEE 

Computer Associates Interna- 
tional Inc. is taking advantage of 
its background with manage- 
ment and security and will use 
that as the basis of a three- 
pronged Web services approach, 
CA officials told SD Times. 

Those efforts will include 
creating new Web services- 
based products, modifying 
existing applications to be 
Web services, and offering 
management and security as a 
hosted offering, said Dmitri 
Tcherevik, director of Web 
services at the Islandia, N.Y., 
company. 

CA began its move into the 
Web services arena in July 
when it introduced the Uni- 
center Web Services Distrib- 
uted Management (WSDM) 
application, which is promised 
for general availability by the 
end of the year. 

The company added the 
product to its management 
software because Web services 
need to be managed in a dif- 
ferent way than traditional 
network management prod- 
ucts, Tcherevik said. 

"Web services have their own 
messages. They must be man- 
aged based on them," he said. 

SECURING SERVICES 

Another product, yet to be 
named, will combine Web ser- 
vices management and security. 
It will be formally introduced 
next May, and is scheduled to 
be available in the second half 
of 2004, Tcherevik said. 

CA plans not only to devel- 
op new Web services manage- 
ment and security software, 
but also to modify its existing 
line into Web services. That 
way, Tcherevik said, customers 
will be able to integrate the 
management products into 
their own corporate portals. In 
addition, applications, by defi- 
nition, will be able to commu- 
nicate with one another. For 
example, in the case of Uni- 
center ServicePlus Service 
Desk, which was released as a 
Web service earlier this year, it 
now can receive service tickets 
that CRM products create 
upon reaching certain speci- 
fied thresholds. 

CA also is planning to offer 
network management as a host- 
ed Web service. Tcherevik said 
his company can be successful 



offering hosted management, 
when other hosted applications 
died on the vine, because cus- 
tomers don't see network man- 
agement as a bet-the-business 



type of function. 

In addition to developing 
and hosting Web services, CA 
is working with standards bod- 
ies to extend the specifications, 



Tcherevik said. In March, CA 
teamed with a dozen other 
companies to promote its 
WSDM specification as an in- 
dustry standard. Version 1.0 of 



dards (OASIS), seeks to define 
an architecture for managing 
distributed resources, based on 
the W3C s Web Services Archi- 
tecture. It is expected to be 
completed in January 2004. I 
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Taking a Composite View of Business Info 

Start-up integrates via enterprise abstraction solution 



BY DAVID RUBINSTEIN 

A new company with a veteran 
chairman and CEO this week is 
launching a product into the 
enterprise information integra- 
tion space currently held by 
BEA Systems Inc., IBM Corp., 
MetaMatrix Inc. and a few oth- 
er vendors. 

Composite Software Inc. is 
aiming to help companies cull 
structured data and unstruc- 
tured information from different 
sources in different forms and 
use it in a way that makes sense 
to them semantically — in other 
words, a new type of ROI: 
return on information. Compos- 
ite tackles this problem by creat- 
ing an abstract layer above the 
data stores, allowing people to 
access all kinds of information 
without worrying about adapters 
and connectors into databases or 
enterprise applications. 

"Access to data is critical to 
any computing paradigm," 
explained Jim Green, Compos- 
ite's chairman and CEO. Previ- 
ously, Green was involved in 



writing the CORBA specifica- 
tion at Sun and later founded 
Active Software, which was 
acquired by Web Methods in 
May 2000. 

"SQL, for example, predates 
any kind of a service-oriented 
architecture. For that to work, 
there are two key points. One, 
you have to provide access 
through standards, not propri- 
etary APIs. And two, you have to 
present the information how the 
consumer wants to see it, not 
how the software stores it. You 
need an abstraction layer 
between the schema and the 
application. Here, we call that a 
view." A drag-and-drop interface 
simplifies creating the views, or 
data models, Green said, noting 
that changes to the data repre- 
sented in the view will change 
the underlying data in its store. 

These views are created and 
stored in the Composite Infor- 
mation Server, which was set to 
be announced on Oct. 13 as 
being generally available. By 
creating views into People Soft 



or Siebel applications, Oracle 
databases, Word documents 
and third-party Web services, 
users can get aggregated data 
from multiple sources that can 
be limited by role-based con- 
trols and customized to how a 
user might want it, such as view- 
ing all orders from customers 
for more than $10,000, accord- 
ing to Mike Abbott, who found- 
ed the company two years ago 
and serves as CTO. "You don't 
want to expose all the data to 
everyone all the time," he said. 

Once created, such as by 
defining "customer" and linking 
things such as name, credit rat- 
ing or buying history to the title, 
these views can be reused across 
different data sources and in dif- 
ferent forms, such as a portal 
application or an Excel spread- 
sheet, Abbott explained. 

He said Microsoft's Office 11 
suite makes a suitable presenta- 
tion layer for the Information 
Server. "Once you connect the 
view into the data, you can wire 
the view into Office 11 with five 



clicks of a mouse," he claimed. 
Once in Excel, for instance, the 
data can be manipulated; or, he 
said, the view can be dropped 
into a portal application or a 
Web page. 

Caching is an important part 
of the Composite solution, 
Abbott explained, because 
applications either might not be 
able to hit the desired data 
source at runtime, or the user 
might not want the application 
to hit a slowly changing data 
store every time a transaction 
comes through. 

"This provides for a high 
quality of service," he said. "It 
provides the ability for a user to 
say, 'Between the hours of 9 
and 5, don't query the data 
source, just cache it.' " 

FROM VIEWS TO GRIDS 

Green said that Composite sees 
the opportunity to build views 
on top of views, and these build- 
ing blocks can be used to create 
what Green calls data services 
grids, whereby a network of 



Information Servers are shared 
across the enterprise, and users 
go to the network to get data, 
not the data sources. "This part 
is not yet done," he said. "We 
expect to complete the vision in 
the next year or so." 

Green said he is not sure if 
the company will begin to sell 
prepackaged views with the 
server, or try to build a commu- 
nity of users that can share 
views "like a big swap meet." 

Although MetaMatrix, BEA 
with Liquid Data, and IBM with 
its DB2 Information Integrator 
released in February already 
have staked out a space in the 
market, Green claimed Compos- 
ite differs from those solutions. 

"IBM is a big, complex 
product with a high price point," 
Green said, "while MetaMatrix 
takes a very academic view. 
We try to make ours approach- 
able. Instead of calling it a 
metadata abstraction layer, we 
call it a view. I think we're more 
pragmatic." 

Green concluded, "Also, 
MetaMatrix wants you to put 
your entire life cycle into their 
architecture; we have a smaller, 
lighter weight version." Green 
did not comment directly on 
BEA's Liquid Data. I 
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Electric Cloud Distributes Software Builds 



BY ALAN ZEICHICK 

Saying that software builds take 
too long to execute, Electric 
Cloud Inc. has released its 
eponymous replacement for 
Microsoft's nmake and GNU's 
gmake. Electric Cloud 2.0, the 
first commercial version of the 
product, is designed to distribute 
builds across a cluster of dedicat- 
ed servers and reduce the build 
time by an order of magnitude. 
Version 1.0, which came out in 
November 2002, was released 
only to a few pilot clients, 
according to the company. 

John Ousterhout, founder 
and CEO of the company, said 
the goal is to reduce the write- 
build-test cycle. "How can you 
get from your source artifacts 
to your compiled executable, 
ready for testing," more quickly, 
he asked, adding that while a lot 
of attention has been paid to 
improving code editors and test 
tools, "the build space has been 
pretty much untouched by 
commercial ventures until 
now." 

When asked about commer- 
cial build products such as Cata- 
lyst s Openmake, as well as pop- 
ular open-source tools such as 
Apaches Ant, which are fre- 
quently built into commercial 
tools, Ousterhout dismissed 
them as "little things" that some 
developers use. He claimed that 
those products aren't able to 



and 



handle applications that 
have long build times, 
which often exceed four 
hours, and which actually 
can be 10 hours or more, 
on a daily basis. "We've 
talked to companies with 
build times in the 40 to 80 
hours range," he said. 

Thus the need for 
acceleration, says Ouster- 
hout, who was the original 
author of the popular Tel 
scripting language. "We 
take pieces of the build, 
spread them across the 
cluster of inexpensive 
rack-mount computers, 
thereby accelerate the process. 
We can use dozens of 
machines, and we're seeing 10 
to 20 times reductions in build 
time." The process isn't com- 
pletely scalable, he admitted: 
"For lOx [improvement], we'd 
need about 15 servers." That 
means, "we can get rid of the 
overnight build, and turn it into 
a coffee-break build." 

Electric Cloud, Ousterhout 
said, looks just like the common 
make utility, specifically gmake 
and nmake. "We have a drop-in 
replacement, called Electric 
make or emake. It gives you the 
same results, even down to the 
output logs. The difference is 
that those other versions run 
their compilation sets, typically 
sequentially, on the machine 
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Electric Cloud's node manager allocates server resources to specific build jobs. 



where you run make. We don't 
do that; instead, we run the 
compilations in parallel on that 
cluster of cheap servers." 

Electric Cloud has solved the 
technical limitations that have 
limited past efforts to parallelize 
builds, Ousterhout claimed. 
"Parallel builds, of course, aren't 
a new idea. There have been 
parallel versions of make for five 
or 10 years, but by and large 
those tend not to work very well. 
You can often get a speedup of 
two or three times using them, 
but it's difficult to get more 
because the parallel makes tend 
to break the build." 

The problem, he said, is the 
dependencies. Some files 
assume that others have been 
recompiled earlier, but those 
dependencies, sometimes ex- 



pressed in file headers, can't be 
seen by looking at parameters of 
the build's makefiles. "If you try 
to do a parallel build, you end up 
being overoptimistic, building 
things in the wrong order, and 
you get a product that appears 
superficially to be right, but 
which doesn't reflect the sources 
it was compiled from." 

How did Electric Cloud 
handle this problem? "The 
secret sauce in our product is a 
set of technologies for manag- 
ing the dependencies. We ana- 
lyze the build, as it's running in 
parallel on the cluster, and fig- 
ure out the true dependencies, 
and automatically reorder the 
build on-the-fly to ensure we 
produce the same results [as a 
sequential build]." 

The software does so by 



watching the file system, 
rather than the contents 
of the makefiles, so it can 
see which pieces of 
source code invoke other 
pieces. "As the compilers 
and other tools access 
other files, all of those 
pass through our file- 
system drivers," he ex- 
plained, "so we can see 
that a header file was 
read in this job, but mod- 
ified by a later job. The 
central build machine 
analyzes that, and [then 
switches the order]," 
with results optionally view- 
able on a cluster management 
application. 

Ousterhout said that Electric 
Cloud is merely the first of the 
company's planned tool set. "We 
have ideas for follow-on prod- 
ucts that will make the process 
more manageable, more under- 
standable, more predictable and 
so on." He implied that some or 
all of those products will run 
across the same server cluster as 
the build accelerator. 

Electric Cloud 2.0 runs on 
Linux, Solaris and Windows, and 
is compatible with gmake, 
nmake and also Unix System V's 
make tool. Pricing depends on 
the number of users and number 
of nodes in the server cluster, 
and starts at about US$50,000, 
Ousterhout said. I 



AMD 
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desktops. Both of these models 
include a 64-bit memory inter- 
face and 1MB of onboard L2 
cache, giving a peak 6.4GB/sec 
I/O bandwidth. The 
higher-end Athlon 64 
FX-51 processor, de- 
signed for gamers and 
for what the company 
called "cinematic com- 
puting," has a 128-bit 
memory interface and 
a 1MB L2 cache, and 
12.8GB/sec peak I/O 
bandwidth. 

Prices of the pro- 
cessors, in 1,000-unit 
quantities, are US$278 2005, says Ruiz. 
for the model 3000+, 
$417 for the 3200+, and $733 for 
the FX-51. 

Cinematic computing is 
AMD's term for interactive 
graphics, rendered on-the-fly for 
gaming, that it says would appear 
to be as realistic as a movie. 

The launch event was 






The Athlon XP 32-bit 
processors will 
continue through 



focused on gaming, which is 
one of AMD's traditional 
strengths. In the consumer 
arena, games benefit most from 
faster computers, which im- 
prove the quality of screen 
graphics and can offer poten- 
tially better simula- 
tion realism. Most of 
the hardware and 
software partners on- 
stage with AMD 
CEO Hector de J. 
Ruiz were from the 
3D graphics, gaming 
and entertainment 
industries. 

However, the com- 
pany indicated that 
the processors also 
will be marketed 
toward businesses, 
particularly those that might 
wish to deploy a single processor 
architecture for both 32-bit and 
64-bit applications. Ruiz was 
short on specifics for the corpo- 
rate market, however, and no 
business applications were 
demonstrated during the launch. 



Ruiz insisted that AMD is 
not abandoning its traditional 
32-bit processors, and said that 
the Athlon XP, the company's 
32-bit flagship, will be contin- 
ued at least through 2005. 

AMD is beginning to get 
some traction for the AMD 64 
architecture, at least from other 
major vendors in the 64-bit 
space. Sun is working with 
AMD to port a native Java Vir- 
tual Machine for Linux and 
Windows to the AMD 64 archi- 
tecture. Microsoft used the 
AMD launch event to announce 
a 64-bit version of Windows XP 
for the AMD64 architecture, 
and to distribute a public beta of 
the operating system. General 
availability is promised for the 
first half of 2004. 

According to a Microsoft 
statement, the new operating- 
system version "takes advantage 
of the AMD 64 architecture to 
enable compatibility with 32-bit 
applications without a loss of 
performance in nearly all cases, 
helping protect customers' cur- 



THE 64-BIT DESKTOP 



Sixty-four-bit processors aren't exactly unprecedented on the 
desktop, but previously have been focused on high-end techni- 
cal workstations, such as Sun Microsystems Inc.'s Blade com- 
puters running the UltraSPARC III processor. But Sun worksta- 
tions are hardly mainstream computers on corporate and 
consumer desktops. 

Just barely beating AMD to market with a 64-bit consumer 
desktop is Apple Computer Inc., whose PowerMac G5, based on 
the IBM PowerPC G5 processor, also can commingle 64-bit and 
32-bit apps. The PowerMac G5 began shipping in mid-August. 
However, Apple does not yet offer a notebook in that format. 

Missing from the desktop fray is Intel Corp. The company's 64- 
bit processors, the Itanium 2, have been focused on servers, 
although a new version of the chip, designed for workstations, 
has been announced. The Itanium 2, unlike the Athlon 64, cannot 
run 32-bit x86 applications at full hardware speed along with 64- 
bit applications. Intel has not publicly stated plans for offering 
64-bit consumer desktop and notebook processors. 

AMD CEO Hector de J. Ruiz indicated that since the Opteron 
processor's initial shipments in April 2003, AMD has shipped 
"tens of thousands" of processors. -Alan Zeichick 



rent and future technology 
investments." 

All versions of the Athlon 64 
processor can run 32-bit versions 
of Linux and Windows, although 



64-bit apps can't be run under 
those operating systems. There 
are also several 64-bit distribu- 
tions of Linux available for the 
AMD64 architecture. I 
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< continued from page 1 

standard, is hopeful that the new 
spec will serve to unite major 
database developers IBM Corp., 
Microsoft Corp. and Oracle 
Corp., all members of ISO. 

"The rising interest from the 
big three is to make their prod- 
ucts fully compliant [and] to 
come to an agreement on 
extending the SQL dialect for 
XML, because they are all in 
the group," he said. 

Persson was with the ISO 
before the release of SQL 99 in 
1999, and is largely credited with 
identifying the huge number of 
errors in that spec, which he said 
the new version seeks to correct. 

"The main [intention of] 
SQL 2003 was to correct the 99 
standard. If you look at the 
technical corrections for SQL 
99, it's currently 428 pages. 
Most work has been on making 
it correct. Core SQL features 
are frozen and are exactly the 
same as [those in] 99," he said. 

The same, he said, with two 
major exceptions: the new XML 




'SQL 2003' corrects 
the 99 standard, 



syntaxes and a standardized way 
to interface with Unicode. "With 
the Internet, internationalization 
is coming strongly. Developers 
want to make applica- 
tions which are not just 
portable to different 
computers but that 
work in different coun- 
tries and support dif- 
ferent languages. Uni- 
code [provides] one 
code map for all lan- 
guages." 

According to San- 
deepan Banerjee, di- 
rector of product man- says Upright's 
agement for Oracles Persson. 
server technologies, 
"SQL 2003 is creating standard 
extensions to inspect and extract 
[data] from XML documents," 
he explained, adding that the 
extensions would become organ- 
ic parts of a standard-compliant 
SQL engine. 

While the new standard 
includes features developed 
elsewhere, Banerjee said that 
much of the work going into 
SQL 2003 was developed at 
Oracle. "What has emerged 



from the committee was a con- 
sensus of the various approach- 
es different vendors have taken. 
But if people look at what Ora- 
cle has been doing in 
9i, substantially that is 
the approach that has 
been adopted. Oracle 
was doing it, and now 
it has become stan- 
dard." Banerjee said 
that some of the XML 
features in SQL 2003 
are in Oracle lOg, in 
beta since May, and 
that "a substantial 
part" of the new func- 
tionality will be in the 
general release, ex- 
pected later this year. 

But Don Deutsch, Oracles 
vice president of standards strat- 
egy, complained the spec should 
have gone further. "We're disap- 
pointed that the standard does 
not have more XML functionali- 
ty," he said. "What we have in the 
standard today is publishing 
functions. We can publish SQL 
values into XML, but we can't 
take XML data and manipulate 
and query it with SQL." 



Deutsch cited quibbling 
among rivals as the cause. 
"Frankly if some of our primary 
competitors were ready to agree 
to a broader range of functional- 
ity, it would have been in the 
standard. So it looks like we have 
one side of the coin." 

Tom Rizzo, group product 
manager for Microsoft SQL 
Server, who works closely with 
Microsoft's ISO working group, 
said such conflicts are a natural 
part of the standards develop- 
ment process. "In any working 
group, where you have really 
smart people working on a real- 
ly hard problem, they all come 
up with different solutions they 
each think is best. Then it's a 
matter of negotiation and com- 
promise. And the standards 
process has to eventually be 
shut down; otherwise there 
would never be any standards." 

Rizzo said that while some 
features in SQL 2003 were 
locked down too late for 
Microsoft to implement them 
in the beta version of the next 
release of SQL Server, code- 
named "Yukon," the software 



does implement parts of the 
standard such as XML data 
types, as well as proprietary 
XML publishing extensions 
released with SQL Server 2000. 

"For good compatibility of 
applications moving forward, we 
will continue to support our pro- 
prietary extensions and will add 
the standard extensions as well. 
So customers will have the 
broadest choice." Yukon is 
scheduled to go to public beta in 
the first half of 2004, Rizzo said, 
and is set for release in the sec- 
ond half. 

Despite the hair-splitting, 
Deutsch sees the developments 
as a positive step and is hopeful 
the standard will unify disparate 
efforts among competitive data- 
base developers. "They have all 
been at the table and actively 
engaged. If you have multiple 
ways of doing things, you'll end 
up with multiple communities of 
skill sets and applications that are 
not as easy to move from one 
environment to another." 

IBM, the third major data- 
base provider, declined to be 
interviewed for this story. I 



BENCHMARKS 

< continued from page 1 

showing of irreparable harm is 
entirely speculative," and "the 
showing of likelihood of success 
is equally thin." 

Sonic CTO Gordon van 
Huizen praised the victory, say- 
ing, "Customers deserve broad 
access to information about 
how a product performs." Ven- 
dors, he continued, have been 
so restrictive with the terms of 
their licensing that it has been 
difficult for potential customers 
to speak with existing cus- 
tomers to find out how a prod- 
uct works for them. 

Part of the reason for the 
vendor restrictions, believes 
Kaivalya Dixit, president of 
Standard Performance Evalua- 
tion Corp. (SPEC), is that 
unless the benchmarking is 
carefully controlled, the results 
can vary widely. "I can change 
10 lines of benchmark code and 
get totally different results," he 
said. "But if you make a com- 
plete and full disclosure of what 
you used and how you used it," 
he added, the results are valid. 

Vendors, he said, do not 
want to make such full disclo- 
sures of their products, as per- 
haps they have an optimization 
such as parallel processing or 
concurrency that gives them a 
competitive advantage. 

Companies get involved 



with SPEC, or another group 
called Transaction Processing 
Performance Council (TPC), to 
ensure the benchmark tests are 
standardized and legitimate, 
according to Tom Rizzo, SQL 
Server group product manager 
at Microsoft Corp. 

"This prevents the apples- 
to-oranges comparisons," Riz- 
zo said. "Customers like that 
there are standard bench- 
marks. Otherwise, they would 
have to sift through a lot of 
misinformation." Rizzo indi- 
cated that Microsoft's license 
for SQL Server does not 
restrict benchmark testing, but 
only blocks publication of the 
results. "We want to make sure 
they're legitimate; we're trying 
to protect customers from not- 
valid information." 

Because the TPC has a 
range of benchmarks, Rizzo 
explained, vendors can't tune 
their products for just one test. 
Also, the impartiality of a third 
party doing the benchmark 
tests lends validity to the whole 
process. "For safety bench- 
marks in a car, would you want 
Ford or GM to do their own 
testing, or an independent 
body?" Rizzo asked. 

COMPETITIVE ISSUE 

Yet Atul Saini, CEO of Fiorano 
Software Inc., claimed it is not 
the fear of varying results that 
leads vendors to restrict the 



publication of benchmarks. "It's 
a stick to beat up the competi- 
tion," he insisted. "It's control 
over the sales process. To have 
a restriction [against publishing 
benchmarks] in licensing agree- 
ments puts clouds around the 
process and scares people. The 
only loser is the consumer." 

Saini admitted that Fiorano, 
like other vendors in its com- 
petitive space, has benchmark 
restrictions in its license, but 
said he will be dropping that 
clause. Sonic's Tim Dempsey, 
vice president of marketing, 
also promised that benchmark 
restrictions will be coming out 
of his licensing terms. "We are 
in business to win business," he 
said. "The publication of results 
was done to raise awareness of 
our performance advantages. 
We don't want to be accused of 
similar practices." 

To Saini, that is good news, 
because he claimed that Fiora- 
no soon will publish a bench- 
mark that shows its messaging 
middleware to be faster than 
the Sonic product. "Will they 
be willing to allow our bench- 
mark against their 5.0.1 product 
to be published? I'll bet you 
Sonic will refuse." Saini said 
Fiorano plans to benchmark its 
JMS server offering against the 
next version of SonicMQ. "Son- 
ic couldn't do much to us if we 
posted our benchmark. They'd 
look hypocritical." I 
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they looked and saw there were 
still ambiguities." The group 
then resolved these ambiguities 
so that there would be a single 
way to interpret them. 

If there is a fault with the 
Basic Profile, it's that it is basic, 
dealing with how messages are 
passed, said Ron Schmelzer, 
senior analyst at Zapthink LLC, 
a Waltham, Mass., research firm 
specializing in Web services. 
"Even though they can talk at 
the lowest level, they still can't 
talk at the highest level," he said. 

New profiles need to be 
worked out for security, which 
is one of the biggest hurdles to 
widespread adoption of Web 
services, particularly those that 
are exposed to the Internet, 
said Schmelzer. 

In fact, the organization is 
working on a profile called 
Basic Security, which is based 
on OASIS' WS-Security stan- 
dard, said WS-I's Glover. Both 
are due in 2004, but Glover 
declined to pinpoint a more 
precise time frame. 

Another problem is that 
although the WS-I has released 
the profile for interoperability, 
there is no formal testing body to 
ensure compatibility, and the 
burden of testing rests with the 
final developers. 

Members of the consortium 



probably would not have funded 
a testing body, and it would 
have taken time for such a body 
to gain credibility, said Whit 
Andrews, Gartner Inc.'s re- 
search leader for Web services. 
"Let's say that we said there 
must be an independent testing 
body. If there must be an in- 
dependent testing body, some- 
body's got to set it up and it's 
got to be funded," he ex- 
plained. "I don't see enterpris- 
es leaping up to fund that right 
now. Would they take it to 
OASIS? OASIS develops stan- 
dards. Would they take it to the 
W3C? The W3C is really about 
strategic development of the 
Internet. You have to have a 
new certification body emerge 
from nowhere and gain credi- 
bility and get funding." 

The WS-I has left open the 
possibility of an independent 
testing firm springing up. 

"We're talking with other 
organizations that are in the cer- 
tification business," said WS-I's 
Glover, although he would not 
specify which groups are in 
talks. "If other folks see a busi- 
ness opportunity focused on 
testing people's products based 
on the profile, they can do that." 

In the meantime, and for the 
foreseeable future, end users will 
be able to assure themselves of a 
strong level of compatibility of 
their multivendor Web services 
by running tests themselves. I 
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The Anatomy of a Complete 
Development Solution 



4th Dimension 2003 provides an environment 
for Rapid Application Development with an 
integrated database. Standalone applications 
can quickly and easily be created for both 
Windows and Macintosh platforms (including 
Mac OS X). 







WHEN THE 
SOLUTION 

MATTERS 

With no additional coding, your standalone 
application can be deployed in a cfient-server 
environment. Supporting mixed platform 
connectivity and automatic application 
distribution, 4th Dimension 2003 radically 
increases deployment efficiency. 









Standalon 






CgBasJV 




Web 
Applications 



The same application can easily be Web- 
enabled, with complete scalability - from 
single -tier to three- tier architectures. With 
ar\ emphasis on security, 4D technologies 
are robust enough to run the US Army's 
Web servers. 




Services 



Your application can be Web services- 
enabled with a single dick. One-cJick Web 
service consumption and publishing with 
automatic code creation will have you on 
the fast track to application integration. 
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Metrowerks Gets on Board Support 



Claims new platform suite elevates BSP development from 'black art' to mainstream 



• I • 



BY EDWARD J. CORREIA 

Development of board support 
packages, the first hurdle of any 
embedded project, can be a 
painstaking process involving 
low-level languages and lots of 
trial and error. Metrowerks, the 
software division of Motorola 
Inc., claims to simplify the 
problem with Platform Cre- 
ation Suite 3.0, released in late 
September. 

According to David Beal, the 
company's director of embed- 
ded Linux tools, the new tools 
mainstream a process that just a 
few years ago was thought of by 
some as mystical. "Four or 
five years ago, Linux port- 
ing was seen as a black art. 
At that time, there were 
very few people who were 
really good at porting Lin- 
ux kernels. Years later its a 
different story. Now you 
have companies all over 
the world who can do it." 

Board support packages 
(BSPs) in general include 
a version of an embedded 
operating system ported 
to the specific target hard- 



ware, and drivers that address 
the boards peripherals. Linux 
BSPs, Beal said, also include a 
few applications, such as Telnet 
and FTP, along with GNU build 
tools. Some vendors also supply 
a deployment method. A custom 
BSP must be developed for any 
board being targeted. 

PCS 3.0 permits developers 
to modify, configure and imple- 
ment Metrowerks BSPs, or to 
create their own from scratch. 
"We're trying to leverage all 
the developers who are able 
to create their own Linux ports 
today," Beal said of the tools' 



'ALL ABOARD' 



Platform Creation Suite 3.0 provides four 
new components for developing and deploy- 
ing BSPs. 

• Kernel Importer - allows included kernel to 
be replaced with customized port 

• GNU Importer - permits kernel-specific 
compilers or other build tools to be used 
within PCS framework 

• Skeleton Deploy - provides a customizable 
BSP deployment mechanism 

• BSP Export - creates installable CD image 
for BSPs Source: Metrowerks 



positioning. The company 
offers BSPs targeting designs 
based on ARM, ColdFire, 
MIPS, PowerPC and SH pro- 
cessors; the BSPs are free. 

Beal described the four-step 
BSP development process. The 
first two, kernel and GNU 
import, are optional steps that 
allow developers to replace the 
tools included with the kit with 
their own customized port or 
build tools, or ones downloaded 
from other Linux distributors, 
all of which can be used within 
the PCS framework, Beal said. 
Metrowerks Linux is based on 
kernel 2.4.21. 

The third step involves 
the Skeleton Deploy com- 
ponent, so named because 
it offers a bare-bones 
deployment building envi- 
ronment that can be cus- 
tomized for nonstandard 
boards. "Once the software 
has been built, you have to 
move it to the target 
somehow. [Deployment] 
is board-specific because 
some have compact flash, 
others have networking or 




The BSP Export tool creates a CD to aid in distributing new packages. 



serial ports. Skeleton is a generic 
[environment] to support boards 
we have never seen before." This 
step also can be bypassed for 
Metrowerks BSPs, which are 
loaded through a GUI. 

The final step is to create a 
distribution CD. "BSP Export 
Wizard captures all the changes 
you've created locally on your 
development machine and cre- 
ates an installable ISO image 
for CDs." Modified packages 
may be freely distributed with- 
out royalties. 

Beal said that despite the 
fact that some Linux developers 
charge as much as US$40,000 



for such porting services, allow- 
ing Metrowerks customers to 
distribute the BSPs for free is 
not leaving money on the table. 
"Historically, we haven't seen a 
lot of money in Linux porting." 
Beal hopes that free BSP distri- 
bution will create demand for 
the tools that can configure and 
modify them. "They will act as a 
channel for Metrowerks solu- 
tions. You sell more hardware; 
we sell more tools." 

Set to be generally available 
on Sept. 29, Platform Creation 
Suite 3.0 for Linux OS will cost 
$6,240 per seat, including one 
year of support. I 



BAE Systems Enters General RTOS Market 

CsLEOS marketed to medical, transport, industrial control apps 



BY EDWARD J. CORREIA 

Watch out, Green Hills and 
Wind River. British aviation soft- 
ware developer BAE Systems in 
mid-September entered the 
general real-time operating sys- 
tem market with CsLEOS, 
which the company is heralding 
as the first off-the-shelf commer- 
cial offering certifi- 
able under fault-tol- 
erance specifications 
required for many 
military and aero- 
space applications. 

BAE, which was 
established in 1949, 
is broadening its tra- 
ditional military and 
aerospace marketing 
efforts to include 
medical, transporta- 
tion and industrial 
control systems. A POSIX-com- 
pliant version is planned for 
next year. 

According to Milan Dedek, 
products manager for CsLEOS, 
developers in a wide range of 




BAE's RTOS can be 
used in many indus- 
tries, says Dedek. 



markets stand to benefit from 
the operating system's fault tol- 
erance capabilities. "With safe- 
ty-critical systems, you want to 
know what your fault responses 
will be. So if an airplane's engine 
dies, an engineer can perform a 
fast restart or kick off a redun- 
dant process." For medical 
applications, he said, 
CsLEOS' fault toler- 
ance can be applied to 
life support and life- 
sign monitoring of 
critical patients. "For 
example, you might 
want a heart monitor 
running on a different 
system than other [less 
critical] system moni- 
tors," he said. 

Dedek claimed 
that unlike competi- 
tive RTOSes from Green Hills 
and Wind River, applications 
written for CsLEOS partitions 
do not require linking with the 
kernel, which enables new or 
modified applications to be 



installed without recompiling 
the entire system. 

CsLEOS has been in use in 
BAE's avionics systems since 
2000, Dedek said, and was 
made available commercially 
for the first time in July 2002. 
"Developing and maintaining 
an operating system is expen- 
sive. So by making it commer- 
cially available, we help defer 
some of those costs." Prior to 
that, Dedek said, BAE had 
been building a custom RTOS 



for each application — an expen- 
sive endeavor perhaps, but not 
without some recompense. 
"You might not think that one 
of the core competencies of an 
avionics company would be in 
operating systems, but it turns 
out that it is." 

CsLEOS developer licensing 
starts at US$50,000 per project, 
including development tools, 
OpenGL 2D and 3D graphics 
drivers, and a GUI-based RTOS 
configuration tool. I 




1M 

CsLEOS taps into OpenGL to display 
avionics data in the cockpit. 



WASABI RELEASES OPTIMIZED XSCALE COMPILER 



BY EDWARD J. CORREIA 

Embedded systems developer 
Wasabi Systems Inc. in mid- 
September released an opti- 
mized GNU toolchain for 
Intel's XScale processors, 
including an enhanced compil- 
er that it claims offers perfor- 
mance improvements to gen- 
erated application code. The 
compiler enhancements will 



be incorporated into the GNU 
Compiler Collection 3.4 later 
this year. 

According to a Wasabi 
spokesman, Intel hired the 
company to convert its existing 
ARM processor pipeline 
description to a deterministic 
finite-state automation (DFA) 
pipeline description, which 
minimizes latencies due to 



instruction stalls. Intel is now 
distributing the enhanced gcc 
compiler to its beta developers 
and software partners. 

Wasabi, which develops and 
markets NetBSD, a Unix- 
based multiplatform operating 
system, expects to release a 
commercial version of the 
enhanced GNU toolchain later 
this year. I 




"We've changed the econcHnics of integration; it's as simple 
and as complex as thai. ' Complex because we challenged the 

very notion of integration. We felt true integration should 
connect ever/thing, internally and externally, from business 
units to suppliers to partners to customers, everything. But to 
achieve this, someone had to develop a new architecture. So 
we did. The worlds first Enterprise Services Bus, Sonic ESB M . 
It combines standards- based messaging, Web services and 
XML transformation and intelligent routing to coordinate the 
secure interaction of applications across your extended 
enterprise. It connects existing IT assets with tomorrow's 
ready- to- integrate applications, is nimble enough to change 
as your business does, and is rack solid. This allows yau to 
integrate incrementally. To start where it's most needed and 
grow as required without costly 



obstacles. And that changes the 
economics of integration. Simple. 
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Playing \( ith the Pure Play 




The new world order of general-purpose application servers 
is taking on the entrenched integration giants 



BY JENNIFER DEJONG 



Back in 1999, developers on Andy 
Miller s team had a major integra- 
tion challenge on their hands. To 
keep up with Corporate Express 
Inc.'s rapid growth, they had to 
enable the company's critical applica- 
tions to carry out key business processes, 
minimizing the need for paperwork and 
phone calls. To fulfill orders, the ERP 
application needed to communicate 
effectively with warehouse management 
and a host of other systems. To cement 
relationships with repeat buyers of its 
office and computer products, Corpo- 
rate Express needed to forge direct con- 
nections with customers' procurement 
systems — updating multiple systems on 
each end. 

To address the company's integration 
needs, Miller and his team did what 
most developers would do: They began 
writing point-to-point interfaces be- 
tween the various applications. But they 
quickly discovered that wasn't the 
answer. "It was painfully obvious that 
[the connections] were fragile," said 
Miller, vice president of technical archi- 
tecture at Corporate Express. "The 
applications were so tightly coupled that 
when you change [one or the other of 
them], you break the interface." 

Like many development managers 
facing increasingly complex integration 
projects, what Miller was after was not 
simply the ability to establish a connec- 
tion and exchange data. He needed a 
way to enable each application to play 
its individual part in carrying out a com- 
plex business process, such as 
placing and fulfilling a cus- 
tomer's order. 

"You need to drive a process 
for customer synchronization 
across all systems," said Paraic 
Sweeney, vice president of 
marketing for WebSphere 
business integration at IBM 
Corp. "And you need a consis- 
tent way to do that." You can't require a 
In any company, a customer specific technology 
order involves many steps that on the customer's 
typically span multiple sys- end, says Corporate 
terns, departments and em- Express' Miller. 
ployees. "You take customer 
orders on the front side. You make 
requests, check inventory, notify 




director of product management for Vit- 
ria Technology Inc. At the same time, 
you need to refill inventory, interfacing 
with suppliers and with manufacturing, 
he said. 




accounting, send an acknowledgement 
to the customer," said Todd Martin, 



APP SERVER OR PURE PLAY? 

To integrate applications from a work- 
flow and business process perspective, 
Miller turned to the web Methods Inte- 
gration Platform, from web Methods Inc. 
For five or so years, the pure-play busi- 
ness integration software vendors, in- 
cluding web Methods and Vitria, had the 
business integration software market to 
themselves, said Roy Shulte, 
an analyst at Gartner Inc. He 
also counts SeeBeyond Tech- 
nology Corp. and TIBCO Soft- 
ware Inc. among that group. 

But in the past two years, 
IBM, BEA Systems Inc. and 
Microsoft Corp. have gotten in 
on the act. With WebSphere 
Business Integration, Web Log- 
ic Integration and BizTalk 
Server, respectively, they are 
essentially adding sophisticated 
business integration capabili- 
ties to their application devel- 
opment environments. 
"The question today is not 'Do I need 
an integration server?' It's 'Should I buy 



vendor?' " said Shulte. 

While the two approaches to busi- 
ness process integration differ — one is 
tightly coupled with the application 
server, the other functions as a neutral 
third party — they perform essentially 
the same functions, said Shulte. Both go 
through gateways to make connections 
to otherwise incompatible systems. 
They use graphical tools, enabling 



developers to take a drag-and-drop 
approach to "coding" the links that 
make it possible for one application to 
intelligently interpret and act on anoth- 
er application's business data. "All those 
things for [business process] integration 
are baked into the middleware already. 
There is a lot less [custom] work to be 
done," said Miller. 

► continued on page 24 
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Integration Projects: 
The Costs and Paybacks 



BY JENNIFER DEJONG 

Back in 2000, when software vendors 
were still cashing in on the Internet 
boom, licensing fees for integration 
servers typically ran from US$400,000 to 
$600,000. Today, now the business inte- 
gration pioneers — web Methods, TIB- 
CO and Vitria, among others — no longer 
have the market to themselves, prices 
are dropping. They currently fall more 
into the $200,000 to $250,000 range, 
said Gartner Inc. analyst Roy Shulte. 

But before you leap at the bargain, it's 
useful to take all the associated costs into 
account. As with most enterprise software 
investments, the real cost is not the licens- 
ing fees. It's the labor associated with 
learning the software and engaging out- 
side services to help with the integration 



work. Those expenses will nearly always 
exceed the licensing fees, said Shulte. 

Here's how Gartner breaks down the 
additional costs: 

Software Maintenance: Annual 
maintenance fees for integration suites 
and related middleware are typically list- 
ed at 20 percent to 22 percent of licens- 
ing fees. Actual costs, after price negoti- 
ations, are more likely to run 15 percent 
to 19 percent. 

Consulting Services: Integration 
projects often involve on-site help from 
the integration software vendor you buy 
from. They all offer training and assis- 
tance in the use of their software, typi- 
cally for one or two weeks at the outset 
of the project. Expect to pay $250 to 
► continued on page 25 



24 



SPECIAL REPORT. 



Software Development Times . October 15, 2003 . 



Want to connect your development 

teams seamlessly? 

You've got two chokes: 

Use Perforce or Spin your wheels 




Qfhar a-yjBafna- require an army of 
consultants, monlhiul Mucking, and 

probflhlv the- *dd dab &f crazy glut. 

Wilh Perforce, rutionwkl* *nd 
wnririwirifl rin-v-ntapm-nn-t Innrn^ iinn 
Nam* on wo p k in g togaEliar wrtttauf 
wnrrvirnq abtiul hokJimj il [u^rther 

WofN anywhere riiriju^lna anlvTCMR" 
Parrnrnfl mains u-t* of a wriMunad 
i1xB3 , minD inE-n-QDD prc-lacDl Tar 
e v ni^ir-i>n4iiny cllenl ttCirksp*Cfl H wllh 
tnrvnr rapasiEDry con1«n1i And ihn 
farffrrtK F¥^»v dtfern fcachihu Ll> uruvi-dr 
ramfiilfl usirc wjch quick download IrrfiAt 
rtrhfln maintaining real rimn ntce-s-s Lc 
project ^otivfclv ftfHf statu* !nri>rmaNfrn 

Wllh fretf ort* r Eha fast WAV I* tha- ri&hrt 
kVfty. In-ciall h Fast I-htii it r'asE, run it j jj: 
Willi Dlhor SCM ays-^mi. davalaparn 1acc 

in uiipteflHni csturiic*: <to it tM rSflhi way 

c«r do 71 I no 'ait wav PnriDrca'* spa-ad aifid 
re-a-ch msHn ih? r^uL way I* lh* rl^hG way 
5»a hniv Parlnrcc conifurai m\h -nlnar 
leading 5-CM ayatemn at: 
h tfp ■■■ "www p* nri re», u n nv p>rn? nrn'-rv* nwhlrri 



Hwii Hi 1*|B upttwiJ »^Hii wiiti liniidnnJq- tfl 
uufi and miliaria ai iitei. At th-a com of 
P^rlorce- hfls a rHaliona-l daiabaas- Hntfi 
Wli-Myvd tatfw. W narmal ii^at actiwiy 
can be- accorr phshed ir nrar-zcrD time. 
Lrinjhi i.i|j^-^iiiiT.iiifcelalMl»nQ ■ rai404« 
and branching;! are translated m1a Lnyad 
dais scceas, p>v>ng RerFuica lhc acnJability 
thiit tug prn-ja^n rt?qwra. 

D*v*\vv and n*Hni(*in ■nullhltit wdalin"* 
Parlorcc- - ! Intef File E rnnchmrj Ids yau 
marge new IcaLuraa and apply frKn acrasa- 
codFrtiriB? Smarr mntndala hftopii Irani pf 
yum evD-lviug prciccts -ven while- 1 li =v are 
dfrvtfWd i<n pBrill&l 



Tnaty enm platform P-rFnrGE rum- cm nro-ra 
than 50" ^pflralmg Koroma, i n--r: I ■ ^ i~d i n. ■] 
Windnivs-ii P UNIXi-, LlnuK*, Mac DS-S K, 

AS^M, and fflort. 

InUuraE* wilh laatfirvji IDEa and dalaal 
liadairf, Vi ; n.nl StMKJ NFT.v, Visual C++ ' 
Visual aaaic- , JQj-idar . . Cude^i'arricir J . 
li^i^T'flrt:!. nuafllavConrrolCenniry-H 
Drb'Ti»di, j , and Diner packaoai. 



Perforce 

SOFTWARE 

Fast Software Cortfigurstion Management 
www. perforce, com 



Download your frea 2-uaei\ non-npiring. 
fii "-featured copy now from 

www.perforee.com 

Free (and friendly) technical support ia on 
to answer any and all evaluation questii 



PURE PLAYS 



< continued from page 23 

From a cost and capabilities stand- 
point, the two camps also are com- 
parable, said Shulte. But, of course, 
that hasn't kept either one from insist- 
ing its way is better. "The pure plays 
say, 'Go with us; we are Switzerland.' A 
neutral approach is best," he said. As 
pure plays, they emphasize that they 
connect equally well to all environ- 
ments, and they say that the application 
server vendors are biased in favor of 
building tighter connections with their 
own environments. "There 
are a variety of technologies 
involved here, and from a 
business process perspective, 
we play nice with all of them," 
said Vitria's Martin. 

"We have been doing inte- 
gration for six years. We have 
seen the patterns. We have 




operating on the nuts-and-bolts level. 

By contrast, business process integra- 
tion requires applications that connect 
with one another not simply to share or 
exchange data but to actually under- 
stand what one another has in mind. 

"In one system, customer might be 
defined as anyone who bought from 
us in the last six months. In another, 
customer could simply refer to a 
prospect," explained Shulte, who 
referred to the process as semantic 
transformation. "The semantics must 
be appropriate for the source destina- 
tion software," he added. 

How business applications 
represent even the most sim- 
ple elements tends to vary 
greatly from system to system. 
For example, said IBM's 
Sweeney, "a customer and all 
the attributes of a customer 
are represented in one partic- 
ular way in, say, a Siebel sys- 
tem. But in SAP, UPS Logis- 
tics or your company's custom 



worked through many more of 
the connections," added Jim Integration is about 
Ivers, senior director of prod- 'enabling the business billing application, the config- 
uct marketing at web Methods, to act as one/ says uration of how a customer 
Peter Linkin, senior direc- BEA's Linkin. name and address is stored 

tor of integration solutions at could be very, very different." 

BE A, said, "The big question you face In order to integrate the applications 

with pure plays is, 'How do I integrate effectively, you have to transform the 



my integration server with the applica- 
tion development environment?' " When 
the two are tightly integrated, the inte- 
gration server can easily make use of the 
business logic stored in the application 
server, he said. 

In addition, noted IBM's Sweeney, 
when the integration server is incorporat- 
ed in the development environment "the 
customer doesn't need multiple mecha- 
nisms for extensibility and scalability." 

Linkin noted that webMethods' 
recent announcement it was integrating 
the JBoss open-source application server 
within the webMethods Integration 
Platform proves that integrating the 
integration server with the application 
server is the better approach. 



data to a generic form — then back to the 
application-specific format — so that all 
the applications involved in a business 
process can understand the data, he 
explained. "You need to consistently 
transfer data between applications," said 
Sweeney. "And you need a process 
underneath it." 

ACTING AS ONE 

On a literal level, business integration is 
about how you take my order, fulfill it 
and pass it through the various systems, 
said BEA's Linkin. But in the broader, 
more strategic sense, it is about "linking 
the application development process 
with the business, enabling the business 
to act as one," he said. 




Corporate Express' Miller 
said he is looking forward to 
the new version of the web- 
Methods Integration Platform 
because there are times when 
it's useful to have easy access to 
business logic that's already in 
the application server. "But I 
am of the opinion that the 
application server is good at 
building applications. But it is All apps in a business 
not good at building integra- process must under- 
tions," he said. stand the data, says 

IBM's Sweeney. 
TALKING SEMANTICS 
What makes business process integra- 
tion so challenging is that you are no 
longer dealing with integration on a 
strictly mechanical level. As standards- 
based environments, Java and .NET 
manage integration at the connectivity 
and messaging levels. And while some 
connections are certainly trickier to cre- 
ate than others, you are still basically 



To help make that a reality, 
integration server vendors 
have incorporated reporting 
capabilities in their products, 
typically aimed at C-level 
executives. For example, 
BEA's integration server fea- 
tures what it calls an execu- 
tive dashboard, which pro- 
vides real-time data on, say, 
sales and shipments, cus- 
tomized to the executive's 
needs, said Linkin. 

In the long run, integra- 
tion servers are enabling 
development shops that use them to 
play an increasingly central role in 
helping companies achieve business 
goals. Miller said that to date Corpo- 
rate Express has created direct links to 
more than 200 customers. "You never 
will gain traction with customers and 
suppliers if you require specific tech- 
nology on their end," he said. I 
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INTEGRATION PROJECTS 

< continued from page 23 

$300 per hour for these services. 

Much more expensive is the cost of 
engaging an outside firm to do the actual 
integration work for you. That can run as 
much as $2 million — eight to 10 times the 
cost of licensing fees. Keep in mind that 
it's misleading to apply this cost to a single 
integration project. You are essentially 
investing in an integration infrastructure 
that also will be used for future projects. 

Firms that offer application integra- 
tion services include Accenture, Bearing 
Point, EDS, HP and IBM. 

Training and Time to Learn: Devel- 
opers are likely to spend two to five weeks 
learning how to use the integration soft- 
ware. A typical project will require two to 
six people. Although you may bring in 
additional developers down the road, this 
is primarily a one-time cost. 

Ongoing Technical Support: Inte- 
gration tools typically require .5 to two 
full-time staffers for ongoing technical 
support, not counting additional develop- 
ment work. 

JUSTIFYING THE COSTS 

Shulte said development managers 
should not attempt to justify the software 
and associated costs through direct IS cost 
avoidance. The big benefits of imple- 
menting business integration software lie 
outside of the information systems 



domain, he said. They include clerical cost 
savings and improvements to the business 
process, such as better customer service, 
increased customer satisfaction, improved 
ability to up-sell or cross-sell, fewer errors 
and returns for goods that are ordered, 
and lower inventory carrying costs. 

If the business unit is willing to get 
involved in predicting the potential ben- 
efits, the cost of the integration project 
will be easier to justify. Look to the inte- 
gration software vendors for help during 
the sales cycle. They are, of course, 
eager to help prospective buyers calcu- 
late the potential return on investment. 

For development managers, the real 
challenge is not measuring the business 
payback, but deciding whether to invest in 
the business integration software infra- 
structure or go it alone. For small applica- 
tions with a limited number of interfaces, 
its always more cost effective to code the 
connections yourself, said Shulte. 

To justify the integration software 
and associated costs, the project should 
involve at least two dozen interfaces and 
several application systems, he said. 
Some projects, particularly for compa- 
nies that link with customers and suppli- 
ers, will involve hundreds of interfaces. 

Another factor to consider is how often 
the connections are likely to change. Gart- 
ner research cites a 25 percent to 43 per- 
cent reduction in IS labor costs when you 
use a broker product, compared with exe- 
cuting the same work without a broker. I 
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EDITORIAL 

Integration Is Not Easy 

During this recession, developers and vendors alike 
have said that their greatest challenge — and greatest 
opportunity — is to integrate disparate data systems. 

Its about time. 

For decades, businesses large and small have construct- 
ed powerful silos of information, business logic and data- 
processing capability. Here's the order-management sys- 
tem. Here's the software for managing our New York 
warehouse. There's the software for managing our Chicago 
warehouse. Here's the software for managing shipments 
from Chicago to New York. Here's our billing system. 
Here's another billing system. Here's the invoice-generat- 
ing system, which doesn't connect to our shipping system. 
Here's the credit-card reconciling system, which doesn't 
talk to our accounts-receivable system. 

While most businesses continue to require new applica- 
tions, as well as the expansion of existing applications, the 
payoff will be in careful, controlled integration of those dis- 
parate silos. Integration can lower operating costs, elimi- 
nate errors due to flawed rekeying and data duplication, 
improve customer and employee satisfaction, increase 
business agility and enable new business services. 

Yet integration is expensive and fraught with peril. In 
some businesses, integration projects drag on for years 
and cost millions of unbudgeted dollars. Why? Unexpect- 
ed complexities of data systems can destroy integration 
plans. Superficially impressive technologies can fail to 
scale, or prove to be unreliable. A lack of clearly under- 
stood requirements — other than "Integrate our sys- 
tems!" — can waste time and money. 

Worse, integration projects can bypass an enterprise's 
formal and informal checks-and-balances barriers between 
departments and applications. Indeed, automating process- 
es at the speed of light might prove to propagate logic errors 
and data corruption among systems at unimagined speed. 

New technologies can both help and hinder the success 
of integration projects. Web services, .NET and J2EE inte- 
gration servers and other emerging techniques offer a com- 
pelling approach with open protocols, lower prices and 
greater flexibility than traditional "pure play" solutions. Yet 
it remains to be seen how the newfangled approaches will 
scale, and whether they will prove to be as reliable as tra- 
ditional offerings in a production environment. 

Plus, it seems that every integration provider has sud- 
denly become an expert in building adapters and connec- 
tors. "Oh, we have lots," we hear all the time. "SAP, CICS, 
Siebel, Oracle, Java, .NET — we connect them all in a 
HIPAA-ready Sarbanes-Oxley-compliant way." Right. 

The new mantra we hear is that finally, finally, integra- 
tion is easy. Just point, click, drag, drop. Select your 
adapter, hook up the connector, draw the orchestration, 
specify the schema transformation, and watch the data fly 
across the browser-based interface. 

That's great for demoware. But don't be fooled: 
Whether you go the Web services/integration server route, 
or stick with the high-end "classic" solutions, integration 
will remain time-consuming, expensive and complex. 
However, the flurry of innovation is a welcome improve- 
ment to what had been an industry dominated by a few 
powerful vendors. Integration remains a huge opportuni- 
ty — and as long as the requirements are clear and the 
technologies capable, it's worth the investment. I 



GUEST VIEW 



IS SOAP THE CLEANEST FOR WEB SERVICES? 



I am not smart enough or rich 
enough to be secure when it 
comes to Web services. Today, 
Web services are in demand — 
enterprise portals, Web syndi- 
cation, Web service APIs, etc. 
Everyone wants them for their 
very powerful ability to enable 
distributed computing across 
the Internet. Fast forward past 
the "Wow, Web services are 
cool," and the "We gotta have 
'em," phases, and your chal- 
lenge is to build them. 

Given some of the tools out 
there today, building Web ser- 
vices is becoming quite trivial. 
Within about five minutes of 
opening Visual Studio .NET, I 
can magically expose the weath- 
er forecast for my cubicle. Back 
in the day, things were not that 
easy. We would have to slog 
for hours generating <SOAP- 
ENV: Envelope > tags, making 
sure all our slashes and less- 
thans were formatted properly. 
Today, we have bigger fish to 
fry. Just because todays tools 
allow you create Web services 
at record speed does not mean 
they are ready for prime time. 
If you are like most people, 
exposing some services to the 
outside world, or even to your 
internal business, you would 
like to have some security 
attached to your new services. 
Unless your Web service is 
exposing the current time or 



maybe the status of the compa- 
ny's fridge, you will want to 
make sure those who shouldn't 
access your services, don't. 

The challenge becomes 
building Web services that pro- 
vide secure access to your critical 
applications — a process akin to 
navigating a minefield of short- 
and long-term issues. In 
short, developers have 
limited options when it 
comes to securing Web 
services, and recognize 
that it takes a lot of 
smarts and even more 
money to do so reliably 
and responsibly Herein 
lies my frustration — I do 
not have a lot of money and I am 
not really that smart. 

The developers of the SOAP 
protocol had the foresight to 
know that what they were 
designing would soon need to be 
extended to support things they 
did not feel were important to 
the core of the protocol, not 
unlike the inventor of the touch- 
tone phone building in the # and 
* keys for future use. I'm sure 
that guy never imagined *69 
would allow a call-back to the 
last caller, for instance. Similar 
extensibility exists in the SOAP 
protocol, and while the spec is 
flexible and powerful, it's chal- 
lenging to implement any non- 
spec items, such as security, in 
any standard kind of format. 
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Here's the rub: IT profes- 
sionals live for security, while 
developers, regardless of how 
talented they might be, live for 
interoperability. Security for 
Web services through SOAP 
extensions, or worse yet, a 
home-grown solution, falls right 
into the lap of the developer 
(and neither the IT 
department nor the 
developers are particu- 
larly happy about this). 
Security considerations, 
assumptions and re- 
quirements for develop- 
ers, the IT department 
and the business owners 
who need the data pro- 
tected may all be different. 

A relevant analogy: Devel- 
opers don't write encryption 
technology every time they 
implement an e-commerce site 
or application. The IT depart- 
ment handles security through 
firewalls, SSL certificates and 
the like. An infrastructure of 
technology standards, trusted 
certificate authorities and mil- 
lions of browsers that recognize 
this infrastructure make this all 
relatively simple and possible, 
and puts the right responsibili- 
ties on the right people's plates. 
The server-to-server nature of 
Web services makes securing 
them much trickier. 

Once security is out of the 
hands of a centralized authority, 



LETTERS TO THE EDITOR 



CUTTING COSTS 

I do take some exception to 
the premise in your article 
["Enough Features Already!" 
Sept. 15, page 23, or at www 
. sdtimes . com/news/086/special2 
.htm] that the trend toward cost 
savings achieved with new pro- 
jects is mostly attributed to 
falling hardware prices. 

If I have a project that 
requires 100 users to access a 
database, the general cost would 
be: Oracle non-enterprise with 
processor license: $15,000; DB2 
Enterprise: $10,000; MySQL: 
$500.00. 

The server that I would uti- 
lize would be generally the 
same across these database 
platforms. Actually I may need 
less powerful hardware with the 
MySQL server running on Lin- 
ux versus Windows. 

As you can readily deter- 
mine, database platform can 
have a serious impact on cost 



for the respective project. 

Another part of the cost of 
such projects is the tools that are 
used to design the application. 
Each platform listed above 
would use tools generally associ- 
ated with that platform — there 
are many exceptions here, and 
again I am speaking generally 
These tools also have a serious 
impact on the cost of the project. 

We have a number of pro- 
posed projects that we are eval- 
uating and planning. It is our 
inclination to move more to- 
ward the MySQL/Linux envi- 
ronment with a development 
environment such as Borland's 
JBuilder. The savings are very 
significant! 

Bob Trautman 

Oracle Certified Professional 

Oracle DBA 

MICROSOFT'S ABOUT MONEY 

Regarding your editorial "Blast- 
ing Microsoft" [Sept. 1, page 



34, or at www.sdtimes.com 
/opinions/opinion_085 .htm] , I 
don't believe it's possible for 
Microsoft to separate its applica- 
tions from its operating system. 
For as long as I can remember, 
Microsoft considers applications 
to be extensions of the Windows 
operating systems. This not only 
includes their own applications 
(Word, Excel, Outlook, etc.), but 
also those of third-party devel- 
opers. By considering third-par- 
ty applications as extensions of 
its operating system, Microsoft 
leaves itself open to any bug, 
holes or other types of errors 
written by any developers, not 
just their own. 

While this may not be the 
best approach from an engi- 
neering point of view, it makes 
for a great marketing device. By 
tying developers into its system, 
they made it extremely difficult 
for developers to redo their 
applications to run on compet- 
ing operating systems. But 
then, Microsoft did not make 
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such as your trusty IT depart- 
ment, any services that are built 
and exposed are free to travel in 
and out of your infrastructure 
with little notice — not ideal if 
you want to maintain tight secu- 
rity For example, since Web 
services generally ride on top of 
the HTTP protocol, an IT guy 
may think he has the fort 
secured by allowing only "Web 
traffic" on port 80. But in reali- 
ty, he could be letting the Tro- 
jan horse into his kingdom. 

Even if everyone is on board 
with the risks involved in letting 
developers secure Web services 
with SOAP extensions, there 
are still a slew of logistical 
issues. Since a true standard has 
yet to be widely accepted, there 
are many security options with 
many flavors available. 

Every party consuming the 
Web service will need to be on 
board with whatever mechanism 
the developer decides is best for 
his application: Maybe he will 
use a digital signature, maybe he 
will attach a certificate, or 
maybe he will DES encrypt and 
Base64 encode just the pass- 
word field in a log-in call. Per- 
haps he will want to coordinate 
public and private keys for hash 
algorithms, or attach a certifi- 
cate to a SOAP message. 
Regardless, it all sounds pretty 
daunting to this developer. 

On paper, SOAP security 
extensions look great. However, 
while OASIS has made signifi- 
cant strides on the spec, there is 
still a lot of work to be done. 



Until these extensions become 
an accepted and widely used 
standard, those wanting securi- 
ty through good oP SOAP will 
need to take a deep breath, put 
on their best thinking caps, and 
hunker down for what could be 
some time-consuming and 
tedious development. 

They will need to coordinate 
with all possible consumers of 
the service what mechanism 
they decide to utilize. 

They will need to keep IT in 
the loop on all areas of traffic and 
implement some home-grown 
monitoring and notification to IT 
if and when a breach occurs. 

They will need to keep in 
sync with consumers regarding 
any changes to encryption keys, 
hash algorithms, etc. 

Not only will there be an ini- 
tial hit upfront, but maintaining 
this mechanism will become 
the thorn in some unlucky 
developers side. It will not be 
until the major tool providers 
integrate these standards that 
we will start getting the use that 
allows for truly fluid and seam- 
less integration. 

BUILD VS. BUY 

If I can't build it, what can I buy? 
Since building my own security 
into SOAP seems like a real 
headache and a logistical night- 
mare over the life of the project, 
how about I just buy something 
that will do that for me? 

In fact, there are solutions 
that can shore up my cubicle 
forecast Web service lickety- 



split. There are two classes of 
enterprise products that solve 
the problem from security 
vendors, authentication server 
vendors and enterprise portal 
providers. 

Authentication and security 
frameworks, like Authoria, 
Netegrity and others, provide 
excellent central single-sign-on 
frameworks to enable my Web 
services applications. 

Similarly, application server 
vendors and enterprise portal 
providers offer integrated securi- 
ty frameworks to deal with inter- 
operability issues across the 
enterprise. However, the down- 
side is that these solutions are 
truly only available and worth 
the return on investment to the 
large shops that can afford them. 

So what do we do? Building 
security into SOAP puts way too 
much responsibility in the 
wrong court. Why should this 
one piece of business fall out- 
side the general practices of a 
business? Furthermore, with 
the SOAP extensions as they are 
today, any consumer of a Web 
service is just conforming to the 
choices of the service provider s 
development team. On the oth- 
er hand, buying into a solution 
that has created a standard con- 
solidation of authentication and 
security is great for those who 
can afford it, but a real disap- 
pointment for those who can't. 

For me, I would like to wait 
it out. Despite the fact that 
SOAP has been around for a 
few years now, I consider em- 



bedded SOAP security to still 
be in its infancy. 

However, given that waiting 
it out is not feasible in a devel- 
opment environment, I would 
opt for embracing an XML fire- 
wall product. XML firewalls do 
for SOAP and XML, in general, 
what traditional firewalls do for 
standard Internet traffic. They 
have the ability to inspect the 
SOAP message and header and 
make decisions based on the 
content of the XML. They sup- 
port a number of neat features, 
some even embracing the 
SOAP security extensions. 

By using an XML firewall, 
we give control back to the IT 
department and do not allow 
SOAP traffic to pass through 
our network unnoticed. They 
do come at a price, though. But 
given my choices today, I think 
an XML firewall is the best 
choice for a secure, manageable 
Web services environment. 

Early adopters of any new 
technology always get beat up 
for a while until the kinks get 
worked out. I've been beaten up 
many times in my career, and 
I've decided to bob and weave 
through the Web services securi- 
ty punches this time and try not 
to get hit. Perhaps a year or so 
from now I will be smart enough 
or rich enough to more cleanly 
navigate the Web services securi- 
ty championship bout. I 

Alec Graziano is director of Web 
engineering for Miller Systems 
Inc., an IT consulting company. 



all its money by creating techni- 
cally impeccable software. They 
made it by doing a superb job of 
marketing their mediocre soft- 
ware. The name of the game is 
making money, not developing 
technically superb products. 
And when it comes to making 
money, Microsoft is about as 
good as it gets. 

So, don't hold your breath 
waiting for technically sound 
solutions from Microsoft. Mak- 
ing money is their No. 1 con- 
cern, not sound engineering. 

Norman Reid 

APPLES TO WINDOWS 

"Xcode: Apple's Answer to 
Visual Studio" [Sept. 1, page 20, 
or at www.sdtimes.com/cols 
/firstlook_085.htm] was overall 
a good story, but a few points 
were missed, I think: 

1. In comparing Xcode and 
VS.NET, the author forgot to 
mention the fact that the Xcode 
UI requires about one-tenth of 
the effort of the VS.NET (and 



VS for that matter) UI. Opera- 
tions that are simple in Xcode 
require a master's degree and 
advanced investigational skills to 
complete in VS. For instance, 
adding a file to target in Xcode is 
as simple as clicking a check box 
in the source tree view. I doubt 
there is enough room on this 
page to outline the steps needed 
for this operation in VS. 

Ever have VS compile in 
code that wasn't in your source 
tree view? Try it out sometime; 
it's great. Ever try to organize 
your project into anything other 
than a single directory in Win- 
dows? Get ready for an hour of 
frustration as you tell VS about 
every directory it needs to look 
at to find your files (in an 
incredibly bad piece of UI to 
boot). Why can't VS figure it 
out for you when the files are 
already added to the project? 

2. There was no mention of 
the fact that all relevant and 
needed code information 
comes as part of OS X. The 



headers for nearly every part of 
the system are available right 
out of the box! Every header for 
the system is built into the 
framework of the OS. I'm not 
using the term "framework" as 
some abstract concept, either. 
Look for yourself in /System 
/Library/Frameworks/ and you'll 
find concise and organized col- 
lections of information for every 
part of the machine. 

The Apple developer CD not 
only installs the tools, but also 
installs full HTML-based docu- 
mentation for every object and 
module in the system. It also 
includes a complete list of 
HOW TO documents and sam- 
ple code that blows the VS tools 
out of the water. Apple's docu- 
mentation alone makes develop- 
ment for the Mac infinitely easi- 
er than digging through the mire 
that is MSDN or the miles of 
useless documentation included 
on one of its 40 developer CDs. 

3. Projects in Xcode do not 
require 50 directories of 



strangely named support files 
and link files that only seem to 
take up space and get in the 
way. How many .dsw and .dsp 
files can one person take before 
going insane? Why not have 
just a single file called .vsproj to 
manage everything? Also, why 
a directory called "debug" for 
the build product? Wouldn't 
"build" be easier? 

I have never been more 
frustrated in my life than the 
times I've worked on MS pro- 
jects in Visual Studio. I see my 
productivity cut in half when I 
use it. I'm happy to see that the 
Mac development tools are 
finally getting some attention. 
They deserve every bit of praise 
they receive. 

Mat Davidson 

Letters to SD Times should include the 
writer's name, company affiliation and 
contact information. Letters become the 
property of BZ Media and may be edited. 
Send to feedback@bzmedia.com, or fax 
to +1-516-922-1822. Please mark all cor- 
respondence as Letters to the Editor. 




Software Development Times 
October 15, 2003 - Issue No. 088 



Publisher 

Ted Bahr 

+1-516-922-2101 xlOl 'ted@bzmedia.com 

Editor-in-Chief 

Alan Zeichick 

+1-650-359-4763 • alan@hzmedia.com 

Executive Editor 

David Rubinstein 

+1-516-922-2101 xl05 • drubinstein@bzmedia.com 

Senior News Editor 

Edward J. Correia 

+1-516-922-2101 xlOO • ecorreia@bzmedia.com 

Associate News Editor 

Yvonne L. Lee 

+1-408-737-1153 • ylee@bzmedia.com 

Copy Chief 

Patricia Sarica 

+1-516-922-2101 xl06 • psarica@bzmedia.com 

Art Director 

Mara Leonardi 

+1-516-922-2101 x!09 • mleonardi@bzmedia.com 



Columnists 

Andrew Binstock 

abinstock @p acificdataworks.com 

Larry O'Brien 

larryo @thinkingin.net 

Steven J. Vaughan-Nichols 

sjvn@vnal.com 



Contributing Writers 

Alyson Behr 

alyson @behrcomm. com 

Jennifer deJong 

jdejong@vermontel.net 

Lisa Morgan 

lisaiiiorgan@mindspring.com 

Oliver Rist 

orist@fb2corp.com 

Esther Schindler 

esther@bitranch. com 



Advertising Sales Representatives 
Southwest U.S. 

Julie Fountain 

+1-831-476-1 716 • jfountain@bzmedia.com 

Northeast/North Central U.S./Canada 

David Karp 

+1-516-922-5253 • dkarp@bzmedia.com 

Northwest U.S./Canada 

Paula F. Miller 

+1-925-831-3803 • pmiller@bzmedia.com 

Southeast U.S./Europe 

Jonathan Sawyer 

+1-603-924-4489 • jsawijer@hzmedia.com 



Director of Circulation & Manufacturing 

Rebecca Pappas 

+1-516-922-1818 • rpappas@hzmedia.com 

Circulation Assistant 

Phyllis Oakes 

+1-516-922-2287 • poakes@bzmedia.com 

Office Manager/Marketing 

Cathy Zimmermann 

+1-516-922-2101 xl08 • czimmermann@bzmedia.com 

Customer Service/Subscriptions 

+1-866-254-0110 • service@hzmedia.com 



Bookkeeping Services 

Ken Hafner • Kiwi Partners Inc. 

khafner@kiwipartners.com 



Article Reprints 

Lisa Abelson • Lisa Abelson & Co. 

+1-516-379-7097 »fax +1-516-379-3603 
lisa@ahelsonreprints. com 



BZ Media 

BZ Media LLC 

2 East Main Street 

Oijster Bay, NY 11771 

+1-516-922-2101 -fax +1-516-922-1822 

www.bzmedia.com • info@bzmedia.com 

President 

Ted Bahr 
Executive Vice President 

Alan Zeichick 



28 



COLUMNS 



Software Development Times . October 15, 2003 



www.sdtimes.com 



NO RESERVATIONS ABOUT .NET 



I've had the relatively rare luck to work 
on extremely similar projects in .NET, 
Java 2 Standard Edition and Java 2 Enter- 
prise Edition. My wholehearted favoring 
of .NET over the J2EE platform, while 
supported by theory and analysis, is dri- 
ven by my experiences developing and 
shipping these applications. 

In the spring of 2001, I got a contract 
implementing a proof-of-concept of a 
J2EE middle tier exposing a Web service 
to the outside world and connecting in 
back to a mainframe-based airline reser- 
vation system — what's known in the travel 
industry as a Global Distribution System. 
The GDS domain might well be the very 
definition of a legacy system — the Semi- 
Automatic Business Research Environ- 
ment (SABRE) was rolled out in 1964. 

The company that hired me was 
exceptionally good to work with, and I 
was delighted when they extended my 
contract to the implementation phase. 
The CTO challenged me on the subject 
of J2EE, contending there was no com- 
pelling reason why the subsystem 
couldn't be implemented in "straight" 
Java. I demurred, but the CTO pointed 
out that the subsystem had no need for 
J2EE's main justifications, because per- 
sistence was handled by the GDS, and 
because we were implementing a state- 
less Web service, IP load-balancing 
should allow us to scale. 

Also, the CTO said that he had to pay 



a premium for EJB experience, that 
even having done so he saw people on 
the team struggling with J2EE and tool 
issues, and that ultimately he felt the 
subsystem should not have a layer of 
complexity if concrete benefits couldn't 
be shown. (This was a smart CTO.) 

So we agreed that the team would do 
initial development using the Java 2 
SDK as long as we could revisit 
the need for EJBs regularly. 
What I found was that, like the 
apocryphal frog that sat without 
complaining in the pan of water 
slowly heated to boiling, I had 
been scalded by J2EE. 

The simplest example? It took 
seven minutes between a code 
change and deployment of the 
J2EE prototype, while with J2SE, we 
could go from a code change to comple- 
tion of our entire multihundred test 
suite in less than three minutes. Perhaps 
because of our reduced working set, or 
perhaps because of flaws in a tool that 
we'd used in the J2EE prototype, the 
J2SE-based subsystem load-tested bet- 
ter than our best-case estimates, giving 
us network-limited performance and 
working flawlessly on our duration-test 
thanks to the stellar performance of our 
network programmer. 

So it was with the mindset that J2EE 
had gone awry that I began investigating 
.NET seriously two years ago. Immediate- 
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ly, I was struck with the benefits of better 
access to the underlying platform and C#'s 
evolutionary improvements over Java. I 
wondered, though, how .NET's capabili- 
ties would compare with the world of 
server-side Java I'd been immersed in for 
the previous half-decade. Those questions 
were answered when earlier this year, I 
was hired to lead the development of, yes, 
a .NET-based Web service application 
integrated in the back to a GDS. 

It wasn't precisely the same applica- 
tion, because business logic 
in the travel industry is ex- 
tremely specialized, but the 
concerns and structure of all 
the subsystems — J2EE, J2SE 
and .NET — were dictated by 
similar constraints. 

True, each time I approached 
the problem I had more experi- 
ence with the GDS and travel 
industry's XML standard, and naturally 
one would expect greater productivity 
on the third project than on the first, so 
I'm not going to harp on the fact that, 
aside from business logic, the .NET pro- 
ject took 80 percent of the J2SE pro- 
ject's time with less than 75 percent of 
the manpower. 

Why did the .NET project so impress 
me? The J2SE subsystem was extremely 
successful and, last time I checked, was 
the leader in terms of dollar transactions 
per month. Both the .NET system and 
the J2SE subsystems easily exceeded 
scaling requirements. The J2SE project 
used more external tools and libraries, 



but that's not necessarily a weakness; both 
the .NET and J2SE subsystems had small 
surface areas composed of efficient tools 
(in contrast, the J2EE app server had a 
server-pages solution that wasn't used 
and, if server pages had been needed, 
would not have been my preferred solu- 
tion). So in terms of my direct responsi- 
bilities, you could flip a coin between Java 
with the J2SE and C# with .NET 

But what really proved .NET's value 
proposition to me was when I saw how 
the subsystem was integrated. Web ser- 
vices may be a buzzword in semidecline, 
but when you witness the ease with 
which minimally experienced server- 
page programmers can successfully par- 
ticipate in developing a scalable distrib- 
uted application by consuming Web 
services developed by more experienced 
programmers, you become a believer. 

When you witness developing pro- 
grammers transitioning into a more 
object-oriented approach because using 
Visual Basic .NET they can do so seam- 
lessly, and then you go back to your own 
workstation and see the curly brackets of 
C#, you realize that what's really being 
integrated is not subsystems, but the 
programming team. What's being turned 
into a coherent whole is not code, but 
coders. And that's why I choose the 
.NET platform. Without reservations. I 

Larry O'Brien is an independent tech- 
nology consultant and analyst, and the 
founding editor of Software Develop- 
ment Magazine. 



SCO: TIP OF THE ICEBERG? 



In an impressive show of unity, the 
open-source community has roundly 
condemned SCO's lawsuit, which alleges 
copyrighted source code was placed in 
the Linux source tree. Every pundit, 
analyst and user has inveighed on the 
topic. 

However, we must do more than ful- 
minate about the SCO problem. Consid- 
er the possibility that SCO might be just 
the tip of the iceberg. Given the record- 
ing industry's decision to go after users 
who downloaded copyrighted works, a 
greater enforcement of copyrights is 
likely to be the norm, and SCO is not a 
one-time problem. We need to start for- 
mulating over- arching solutions. 

Three categories of problems lurk: 
trade secrets, patents and, of course, 
copyrights. 

Let's start with trade secrets. Say a 
disgruntled programmer "contributes" a 
key piece of source code that reveals a 
trade secret. Another firm picks it up not 
knowing its origins and develops a suc- 
cessful competing product. When the 
original company discovers the leak, it 
can no longer close the barn door 
because the trade secret has been dis- 
tributed worldwide. What can that com- 
pany do? And what are the obligations of 
all the other companies — such as Red 



Hat in the case of Linux — that might 
have profited from the sale of products 
containing the code? 

Patents are a different problem. They 
are frequently violated unintentionally, 
and accountability can be demanded 
long after the violation took place. Let us 
recall Unisys' pursuit of licensing fees 
for GIF files (due to a patent on GIF's 
compression algorithms) long 
after GIFs had become an 
accepted standard. 

Equally astonishing was the 
discovery that using XOR to 
reverse pixels for displaying an 
image was a violation. But 
patent 4,197,590, filed in 1980 
made it so. In fact, the inadver- 
tent violation of patents and 
delayed enforcement are often a remedy 
to patent suits: The typical scenario is 
that someone sues IBM for patent viola- 
tions, IBM responds by finding one of its 
10,000 patents violated in the accuser's 
software, and they settle the suit by 
licensing the technologies to each other. 
However, in the case of open-source 
products, how would such a quid pro 
quo work? 

In the SCO case, I think it's likely that 
code copyrighted by SCO found its way 
into Linux. It could have happened in 
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any one of a dozen ways, many of them 
devoid of nefarious intent. But this begs 
the larger question: Who else's private 
intellectual property is in Linux, or 
potentially other open-source projects? 
The question of commercial code in 
open source has been around since the 
movement's earliest days. Anyone famil- 
iar with the contentious dispute 
between Jim Gosling and Richard Stall- 
man over the display code in GNU 
emacs will recollect how long this argu- 
ment has gone on. In those days, 
however, the issue was not mon- 
ey. There was no money in 
open-source software; the Free 
Software Foundation's thread- 
bare finances bore mute testi- 
mony to this point. As a result, 
money was not the form of rem- 
edy typically sought. Simple cor- 
rection of code was sufficient. 
(Gosling's code was removed from Stall- 
man's emacs in v. 16.56 and the issue 
went away.) 

The dynamics of the Linux market, 
though, have changed irreversibly as big 
companies derive direct commercial 
benefit from open-source products — 
which is why SCO sued IBM, but not 
Linus Torvalds. 

As a result, the question of ownership 
of code and algorithms now hangs over 
the open-source community. And the 
community will need to come to grips 



with it, if new suits are to be avoided. 

One possible solution lies with the 
newly formed Open Source Develop- 
ment Lab (OSDL) in Beaverton, Ore., 
which aims to be the "center of gravity 
for Linux." This group, funded by a vari- 
ety of vendors interested in promoting 
Linux, may be the ideal party to formu- 
late policies for the submission of code 
and the verification of code that is 
accepted. 

For example, OSDL might seek to 
work with SCO to obtain a copy of 
the Unix codebase in exchange for legal 
immunity with the proviso that it do 
a line-by-line comparison to remove any 
code that overlaps with the Unix 
sources. (That, of course, assumes 
that SCO is seeking to remove its 
intellectual property from Linux.) Like- 
wise, OSDL might need to patent 
some Linux innovations and make them 
bargaining chips if it is sued for inadver- 
tent patent violations. 

Whatever the solution, I think that if 
the open-source community does not 
respond proactively to these issues with 
new policies as to how code is submitted 
and accepted, the SCO case will be 
remembered not as an unpleasant 
anomaly but the beginning of an unfor- 
tunate trend. I 

Andrew Binstock is the principal analyst 
at Pacific Data Works LLC. 
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THE MISERY OF DEBUGGING 



There are few jobs developers hate 
more than debugging. They tend to 
want to create something new, not track 
down annoying logic bugs, or worse still, 
a single misspelled word that causes the 
just-in-time compiler to hiccup when 
the tide is high and the moon is full. 

They may hate it, but people are get- 
ting tired of viruses like SoBig, Blaster 
and Slammer that cause havoc thanks to 
poor programming practices. Indeed, 
the National Institute of Standards and 
Technology estimated that in 2001, 
US$59.5 billion was lost annually be- 
cause of software bugs. The Sustainable 
Computing Consortium, an academic, 
government and business initiative to 
drive IT improvements, thinks that esti- 
mate is on the low side. It thinks that 
defective computer systems cost U.S. 
companies alone more than $200 billion 
annually. I think, "Is that all?" 

Of course, ask anyone in the business 
and they'll tell you that programming stan- 
dards for commercial products have never 
been lower. I'm not sure I buy that. I've 
been sitting here, thinking about dBase 
IV's general awfulness and WordStar 2000 
and OS/2 1.1, neither of which ever met a 
printer it liked. Back in the good old days, 
top companies were more than capable of 
producing truly awful software. 

What is different, though, is the stakes 



are higher. Today, everyone uses software 
at home and at work. 1988's Morris Worm 
still takes the cake for the most damage 
done to the Internet as a whole, but mil- 
lions more users were inconvenienced by 
SoBig, Blaster and Slammer. 

Of course, your customers aren't 
going to turn away from their computers. 
But they are going to explore software 
alternatives. If you still think your 
end users are going to wait 
around for you to fix all your 1.0 
release bugs, I think you've got 
another thing coming. 

Now more than ever, it's time 
to get programming right the first 
time. Besides, as the old pro- 
gramming saying goes, it takes 
$10 to fix a bug during develop- 
ment, $100 to fix it in quality assurance, 
$1,000 to fix the bug during beta testing, 
and $10,000 or more to fix it after it's 
been deployed. 

So how do you do that? Emphasize 
quality over quantity. If that means your 
programmers' lines of code go down, so 
be it. If that means you spend more time 
managing code reviews, and less time 
managing budget reviews, so be it. 

It also means that you might want to 
adopt Extreme Programming ("Extreme 
Planning," Jan. 15, 2001, page 25, or at 
www. sdtimes . com/cols/bookwatch_022 
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.htm). You don't have to become a fanatic 
about it, but the basics — dividing jobs into 
small projects that are completed with 
constant developer and user communica- 
tions — make a lot of sense. What's wrong 
with requiring nightly builds, anyway? 

When it comes to choosing Java tools 
and platforms, you also should require 
that your developers use only J2ME 1.4 
and above. Why? Because it's only then 
that Sun introduced a built-in assertion 
capability with the keyword "assert." With 
this, you can spot problems that 
otherwise would lie in wait for an 
end user. Combine assert with 
J2ME's 1.4 logging API, and you 
can track what's going wrong in a 
program even after deployment 
without end users taking a hit. 

You should also look to using 
debugging tools such as gdb 
(gcc.gnu.org/java/gdb.html) if 
you're compiling your Java code with the 
open-source jcc compiler. 

NetBeans programmers should give 
Sun's open-source Jackpot Project 
(research.sun.com/projects/jackpot) a try. 
In particular, the Jackpot Source Code 
Metrics (JSCM), which presently works 
only as a beta module for NetBeans, gives 
you a static code checker. This uses lexi- 
cal scanning, parsing and semantic and 
data-flow analysis. You've heard that 
before, right? But JSCM goes beyond 
that by comparing the code against a set 
of metrics that flag the errors in an IDE 



environment so that you can spot and 
repair the problem immediately. 

Better still, these metrics can be set 
to different audit levels so that you will 
see only the level of problems you're 
looking for during a debugging session. 
Sounds good, doesn't it? 

It is good, but there's one problem with 
Jackpot. The program, which also was sup- 
posed to work with Java in general, hasn't 
been updated since the fall of 2002. 1 fear, 
like so many other debugging efforts, that 
it's been placed on a back burner. 

If so, that's a real mistake. When a pro- 
ject comes close to deadline, all too often 
our good intentions about writing good 
code go out the window. 

Enough is enough. It's time to make 
debugging code job No. 1. People have 
put up with bad programs for far too 
long. In the early days of most technolo- 
gies, there's a period when people are 
willing to put up with any trouble, just so 
long as they can have a car, a radio or a 
personal computer. But then there comes 
a day when people want a product that 
works right the first time, and not the sec- 
ond time or half the time. That day is 
coming for software. You can be part of 
this future or part of history. The decision 
is yours. I 

Steven }. Vaughan-Nichols is editor of 
Practical Technology (www.practical- 
tech.com) and has worked as a program- 
mer for NASA and the Dept. of Defense. 
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NAVIGATING THE SEA CHANGE 



According to research firm Gartner 
Inc., application development is at 
a crossroads. That, in fact, is the name of 
one of the tracks of sessions the compa- 
ny will present at its Symposium and 
ITxpo next week in Orlando, Fla. 

Many developers and vendors may 
believe that these changes are brought 
about by new technologies, such as 
J2EE, .NET, grids or Web services. But 
the driver isn't bits and bytes. 
It's dollars and cents — how busi- 
nesses continue to undergo pro- 
found changes because of 
advances in technology. 

Ever since the dot-com shift 
allowed many businesses to com- 
municate with and sell to their 
customers directly, top execu- 
tives have come to view their 
technology assets as balance-sheet rev- 
enue generators, rather than merely as 
business facilitators designed to smooth 
internal business processes. That has led 
to quiet but radical changes in the goals 
and operations of software developers. 

Indeed, that's affected the very 
nature of the applications that are being 
developed. Today, they are dramatically 
different than they were even 10 years 
ago. And the requirements of those 
applications are radically different than 
they were when the only users were 
employees, who had no choice but to 
wait a long time for request responses 
and who would still come to work the 
next day even if their software tools 
failed. Internet customers, businesses 
have learned, are much less forgiving. 

Because applications today are out- 
ward-facing, and expose more of a com- 
pany's business processes, internal logic 
and sensitive databases than ever before, 
developers are being told to consider 
security while building any new soft- 
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ware — because even if it's not outward- 
facing today, thanks to Web services and 
the drive toward business integration, any 
corporate asset is likely to be vulnerable 
to unauthorized access. All the while, as 
companies continue to adhere to the do- 
more-with-less mantra, it is imperative 
for developers to get these applications 
right the first time, which means they are 
being asked to take on more of the 
responsibility for testing during 
development. 

Teresa Lanowitz, a researcher 
at Gartner, has tracked these 
changes and sees big differ- 
ences in the role developers 
now play within an organization, 
as well as in the processes and 
tools developers use. 

"The real challenge for the 
development group," Lanowitz said, "is 
to make sure it is aligned with the busi- 
ness group. It's part and parcel [of a 
business], no longer an evil necessity." 

She said that above and beyond writ- 
ing code, corporate developers will be 
tasked with security issues, white-box 
testing of applications and ensuring com- 
pliance with state and federal mandates. 
"Developers are now much more a part 
of the whole SD life cycle, from require- 
ments gathering to production and main- 
tenance," she added. "Ten years ago, a 
developer would write something and 
throw it over to QA and operations. Now 
it's more of a community process." 

IBM's Gina Poole, a vice president in 
IBM's developer relations group, sees a 
talent pool divided into seven different 
segments: the traditional developers 
skilled in multiple languages such as C, 
C++ and COBOL; the Web developer 
who works with page editors and visual 
design tools; the corporate developers 
who are using the latest 4GL tools and 



IDEs; and the specialty developers who 
either are Java or .NET experts, or focus 
on embedded systems or databases. 

The corporate developer, according to 
Poole, is "coming up above low-level cod- 
ing and focusing on business require- 
ments." This developer, she said, is 
spending more time integrating existing 
applications, components and Web ser- 
vices than he is creating new applications. 

"That role and focus of IT adding busi- 
ness value really, in the current environ- 
ment, makes [corporate developers] even 
more critical," Poole said. "They can 
translate the business needs into technol- 
ogy." Vendors, Poole insisted, see their 
role as providing higher-level tool suites 
that make application modeling, assem- 
bly, testing and deployment easier. In fact, 
Gartner's Lanowitz predicted that by 
2007, most small software tools compa- 
nies will be gone, and those that will sur- 
vive will do so only by complementing the 
full stacks offered by the software giants. 

But there is a downside to these devel- 
opment tools that put layers between 
developers and the code. The vendors 
selling these tools call it "ease of use"; 
however, a class of developers is being 
created that cannot troubleshoot when 
something deep in code that is automati- 
cally generated by the tools goes awry. 

Mark Wesker, CEO and founder of a 
company called Artifact that sells a prod- 
uct designed to help organizations get a 
handle on the code-sharing that develop- 
ers do, said his idea came out of "the con- 
stant problem of having 80 engineers but 
only four guys writing code. There is a 
plethora of lightly skilled developers." 

What does it all mean for developers? 
It's time to come in from the code and 
warm up to the fact that in your depart- 
ment, business issues have gained equal 
status with technical ones. I 

David Rubinstein is executive editor of 
SD Times. 



Number of Embedded Devices 
Shipping With Java 



DATA WATCH 



7M 
CM 
5M 

ZW 
1M 



GQO.g 



lao.a 



177.3 



7*L9 




Z0D3 



20"* 



;X:- iJCi iJU? 



Java's success in embedded systems is assured, according to 
market researcher Venture Data Corp., especially in con- 
sumer and handheld devices. 

A new VDC report found that Java phones and handheld 
devices have spread from the Asia-Pacific market, where 
they achieved early traction, to Europe and North America. 
The research firm expects more than 74 million Java-based 
devices to be sold in 2003, with most of those being mobile 
phones. The key, VDC believes, is that midrange and high-end 
mobile phones include a Java-based runtime environment 
for downloaded applications. 

However, VDC reports that Java is garnering interest 
outside the mobile and consumer markets. Office automa- 
tion and retail automation are starting to see increasing 
shipments, while significant research and development is 
ongoing in automotive telematics and military applications. 



The governing body of the European Union approved 
a bill to formalize the way software patents are 
issued with the intent of restricting them, including 
forbidding the patenting of business methods such 
as Amazon.com s one-click shopping technique. 
Companies such as Alcatel, Microsoft, Nokia and 
SAP had opposed the legislation before the Euro- 
pean Parliament. The EU Patent Office issues 
patents while the national courts of the 15 EU mem- 
bers interpret patent law. The bill will prevent 
enforcement of many of those patents, causing 
opponents to claim that invention will be stifled 
because the inventions can't be protected by patent 
law. Any "computer-implemented invention," 
except the technical contribution, cannot be patent- 
ed, nor can actual software. The technical contribu- 
tion is defined as a contribution to the state of the 
art in a technical field; technical character is one of 
four requirements for patentability . . . TIBC0 
Software Inc. announced revenue for the third 
quarter ended Aug. 29 of US$66.1 million, up from 
revenue of $63.2 million for the same quarter a year 
earlier. The company reported net income of $2.7 
million, as opposed to a loss of $45 million in the 
year-ago period . . . Palm Inc. reported revenue of 
US$177.4 million for the 2004 first fiscal quarter 
ended Aug. 29, up from $172.3 million reported a 
year earlier. The company posted a first-quarter net 
loss of $21.7 million based on generally accepted 
accounting procedures, compared with a loss of 
$258.7 million in the first quarter of fiscal 2003 
. . . Web services automation software vendor 
AltoWeb Inc. has ceased operations. I 
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Ascential World Oct. 26-28 

Miami 

ASCENTIAL SOFTWARE CORP. 

www.ascential.com/ascentialworld 

Microsoft Professional Oct. 26-30 
Developers Conference 

Los Angeles 

MICROSOFT CORP. 

msdn.microsoft.com/events/pdc 



00PSLA 2003 

Anaheim, Calif. 

ACM SIGPLAN 

oopsla.acm.org/oopsla2003 



Oct. 26-30 



Mac OS X Conference Oct. 27-30 

Santa Clara 

O'REILLY & ASSOCIATES INC. 

conferences.oreillynet.com/macosx2003 

STAR West Oct. 27-31 

San Jose 

SOFTWARE QUALITY ENGINEERING 

www.sge.com/starwest 



Borland Conference 

San Jose 

BORLAND SOFTWARE CORP. 

info.borland.com/conf2003 



Nov. 1-5 



Comdex Fall Nov. 16-20 

Las Vegas 

MEDIALIVE INTERNATIONAL INC. 

www.comdex.com 

For a more complete calendar of U.S. software devel- 
opment events, see www.bzmedia.com/calendar. 

Information is subject to change. Send news about 
upcoming events to events@bzmedia.com. 
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